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Several  recent  itudiea,  performed  to  develop  optimum  alerting  methods  for  new  alerts  that 
had  to  be  retrofitted  to  existing  aircraft,  identified  as  major  alerting  system  problems  the 
proliferation  of  alerting  systems  and  the  Inconilitent  application  of  alerting  concepts  In  cur- 
rent commercial  transport  aircraft.  The  objective  of  this  study  was  to  address  these  problem 
areas  In  the  following  manner:  refine  and  augment  the  stimuli  response  data  collected 

under  the' previous  studies,  (S).  provide  test  plans  for  additional  stimuli  response  tests 
required  to  complete  the  stimuli  response  data  bate, ^provide  tabulations  of  the  alerting 
methods  and  alerting  requirements  used  on  current  commercial  transport  aircraft,^  dev- 
elop a method  for  prioritizing  alerting  functions  and  prioritizing  the  alerting  functions 
accordingly,  CS)4iote  conflicts  between  current  alerting  requirements  and  the  prioritized 
list  of  alerts,  andtbXprovide  recommendations  for  standardization  of  alerting  functions/ 
methods.  The  output  includes  a collation  of  human  factors  data  pertinent  to  alerting  sys- 
tems, cursory  test  plans  for  obtaining  missing  human  factors  data  required  to  complete 
definition  of  and  validate  the  standards  recommended  for  alerting  systems,  criteria  for  alert 
priority  levels,  an  example  tabulation  of  alerts  that  might  fall  within  each  priority  level,  and 
recommended  methods  of  annunciating  the  alerts  within  each  priority  level. 
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FOREWORD 


This  final  technical  report  covers  work  performed  under  the  third  pltase  of  FAA  contract  DOT- 
FA73WA-3233,  “Collation  and  Analysis  of  Aircraft  Alerting  Systems  Data.’’  The  study  was  Ini- 
tiated to  establish  an  alerting  philosophy  for  aircraft  cockpit  alerting  systems. 

The  contract  sponsor  was  FAA  Systems  Research  and  Development  Service  (SRDS)  and  performed 
by  the  Boeing  Commercial  Airplane  Company.  Technical  guidance  for  this  contract  was  provided  by 
Mr.,  John  Hendrickson,  ARD-743,  the  contract  monitor. 

Study  conduct  covered  the  period  January  1976  through  November  1976.  The  performing  organi- 
zation was  Systems  Technology-Crew  Systems,  of  the  Boeing  Commerciai  Airplane  Company, 
Seattle,  Washington.  W.  D.  Sml^  was  program  manager,  L E.  Veitengruber  was  piinclpal  investiga- 
tor, and  G,  P.  BOucek  was  the  slgnal/response  analyst. 
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SYNOPSIS 


The  purpose  of  this  study  was  to  develop  preliminary  design  guidelines  and  standards  for  aircraft 
alerting  systems. 

The  scope  of  tlie  study  encompassed  five  mtjior  tasks.  Task  I consisted  of  tabulating  current  alerting 
methods  and  deciphering  factors  causing  proliferation  of  the  aleits.  In  Tuk  II,  criteria  for  prioritiz- 
ing the  alerting  Atnetions  were  developed  and  applied.  In  Task  III,  standards  and  regulations  appli- 
cable to  alerting  system  sti^dards  were,  reviewed  and  compared  with  the  results  of  Task  H to  identify 
conflicts.  Tasks  IV  and  V consisted  of  broadening  the  Itimuli  response  data  base  developed  in  a pre- 
vious study  and  defining  tests  required  to  obtain  missing  data. 

Preliminary  alerting  system  design  guidelines  (standards)  were  developed  from  the  results  of  each 
task.  The  guidelines  Included:  (1)  criteria  for  four  alert  priority  levels,  (2)  a tabulation  of  the  alerts 
that  might  fit  the  criteria  for  the  two  highest  priority  levels,  (3)  an  example  tabulation  of  alert 
priorities  within  each  alert  category,  and  (4)  recommended  methods  of  annunciating  the  alerts  with- 
in each  priority  category,  In  addition  to  these  guidelines,  cursory  test  plans  for  obtaining  the  missing 
human  factors  data  required  to  complete  definition  of  and  validate  these  guidelines  are  also  provided. 
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1.0  INTRODUCTION  AND  SUMMARY 


1.1  INTRODUCTION 

This  contract  is  the  third  of  a series  of  contracts  that  have  evolved  from  studies  of  independent  alti- 
tude monitor  requirements  to  this,  a study  of  cockpit  alerting  system  problems.  Under  the  first 
contract,  “Development  of  an  Independent  Altitude  Monitoring  (lAM)  System  Concept,’*  senior 
principles  and  control-display-alerting  methods  for  lAM  systems  were  studied.  That  study  indicated 
that  additional  research  was  required  to  assess  the  effectiveness  of  various  lAM  oontrol-display- 
alerting  methods.  A second  contract  was  issued  to  study  these  alerting  problems.  A summary  of  alert 
philosophies  used  in  current  aircraft  and  lAM  systems,  a data  base  of  currently  used  alerting  charac- 
teristics including  stimulus  response  characteristics,  three  recommended  lAM  alerting  methods  for 
each  category  of  aircraft  (ll^t  private  aircraft,  commercial  transports,  etc.),  and  guidelines  for 
developing  or  completing  development  and  implementation  of  an  lAM  system  were  produced.  The 
proliferation  of  alerting  devices  in  the  cockpit,  the  inconsistent  application  of  alerting  concepts  in 
current  commercial  transport  aircraft,  nonadherence  to  existing  alerting  system  standards  because 
they  were  outdated,  and  the  need  for  a set  of  design  objectives  and  design  guidelines  acceptable  to 
all  commercial  transport  aircraft  operators  and  manufacturers  became  evident  in  this  second  study. 
The  cunent  contract  therefore  was  issued  to  study  the  entire  cockpit  problem, 

The  objectives  of  this  study  were:  (1)  refine  and  augment  the  stimuli  response  data  collected  under 
the  previous  contract,  (2)  provide  test  plans  for  additional  stimuli  response  tests  required  to  com- 
plete the  stimuli  response  data  base,  (3)  provide  tabulations  of  the  alerting  methods  and  alerting 
requirements  used  on  current  commercial  transport  aircraft,  (4)  develop  a method  for  prioritizing 
alerting  functions  and  prioritizing  the  alerting  functions  accordingly,  (5)  note  conflicts  between 
current  alerting  requirements  and  the  prioritized  list  of  alerts,  and  (6)  provide  recommendations  for 
standardization  of  alerting  fdnctlons/methods.  The  results  of  this  study  represent  a first  cut  at  design 
objectives  and  design  guidelines  for  alerting  systems  in  new  aircraft.  Considerable  more  refinement, 
testing,  and  analysis  of  the  hardware/implementation  Impact  of  the  alerting  system  concepts  that 
resulted  from  this  study  are  required. 


1.2  SUMMARY 

At  the  beginning  of  this  study,  numerous  inconsistencies  in  the  alerting  concepts  applied  to  each 
type  of  aircraft  were  known  to  exist  (ref.  1).  Specific  Inconsistencies  in  the  aural  alerts  were  known 
and  similar  inconsistencies  in  the  visual  alerts  were  suspected.  These  suspicions  were  proven  to  be 
correct.  In  addition  to  verifying  that  these  inconsistencies  existed  and  the  type  of  inconsistencies 
that  were  occurring,  the  study  showed  that  a proliferation  of  alerts  occurred  in  the  latest  generation 
of  aircraft.  Analyses  of  the  type  of  alerts  Involved  in  the  proliferations  revealed  the  following  facts; 

• Each  new  aircraft  has  Incorporated  more  alerting  functions  than  previous  similar  aircraft 
because  of; 

1 . Differences  in  the  operators’  alerting  system  utilization  philosophies 

2.  Differences  in  the  airframers’  cockpit  design  philosophies 

3.  Additional  regulatory  requirements 


4.  Increased  size  of  the  later  vintage  aircraft 


5 . Use  of  more  complex  lystemi  to  lave  weight 

• Number  of  warning-type  alerts  used  in  commercial  turbojet  transport  aircraft  nearly  doubled 
in  the  transition  ftom  narrow  body  to  wide  body  aircraft. 

• Number  of  caution-  and  advisory-type  alerts  used  in  commercial  turbojet  aircraft  has  increased 
substantially  with  each  new  aircraft  design. 

• A trend  exists  toward  providing  the  crew  with  more  detailed  subsystem  information  (more 
lights  and  bands)  so  that  the  pilots  can  try  to  resolve  malfunctions  in  flight  and  record  better 
maintenance  data. 

• Among  the  narrow  body  aircraft  no  significant  change  in  the  number  of  alert  lights,  aurals, 

flags  or  bands  occurred.  Aircraft  size,  types  of  operation,  and  vintage  had  little  effect  on  the 

design  of  the  alerting  systems  in  these  aircraft. 

• Wide  body  aircraft  use  substantially  more  alert  lights,  flags,  and  aurals  than  narrow  body 
aircraft. 

• A trend  exists  toward  more  multifunctioning  of  the  alerting  devices. 

• The  number  of  warnings  increased  primarily  because  of  the  red  flags  required  to  annunciate 
the  new  falhire  modes  of  more  complex  autopilots  and  avionics  on  board  wide  body  aircraft. 

• Amber  and  yellow  lights  are  being  used  more  extensively  with  each  new  generation  of  aircraft 
to  annunciate  detailed  subsystem  operations. 

• A trend  toward  annunciating  more  positive  GO  and  SAFE  conditions  with  green  light  exists. 

• White-lighted  pushbuttons  are  being  used  more  extensively  in  place  of  toggle  switches  in  each 

new  generation  of  aircraft. 

• Discrete  alerts  lights  are  being  used  to  replace  traditional  color  bands. 

• No  consistent  utilization  philosophy  has  been  applied  to  the  aural  alerts,  not  even  within  any 
operator’s  or  alrframer's  line  of  aircraft.  Somewhat  of  a standard  appears  to  have  been  esta- 
blished for  only  5 of  the  i)  to  17  aural  alerts  used  on  each  aircraft  today. 

• The  number  of  aural  alerts  is  increasing. 

• Most  rapid  growth  in  the  number  of  subsystems  alerts  has  occurred  in  the  electrical  and  auto- 
matic flight  control  systems.  Negligible  growth  has  occurred  in  the  air  conditioning,  altitude 
alert,  APU,  communications,  emergency  equipment,  flight  instrument,  air  data,  fUel,  and 
powerplant  systems. 

• Master  caution  and/or  master  warning  systems  are  used  in  all  two-man-crew  aircraft  but  in  only 
a few  thrce-man-crew  aircraft. 


• Master  warning  systems  are  activated  by  only  a small  percentage  of  the  red  lights,  approximately 
half  of  the  red  lights  in  the  cockpit.  Similarly,  master  caution  systems  are  activated  by  only 
about  half  of  the  amber  and  yellow  lights  In  the  cockpit. 

• Only  a very  small  percentage  of  the  aural  alerts,  less  than  7%,  activate  the  master  warning  system . 

• Alert  prioritization  currently  is  not  used  on  any  aircraft  except  late  production  models  of  the 
737  and  a few  727s, 

• Inhibiting  of  subsystem  fkult  alerts  is  not  used  on  any  aircraft  except  the  DGIO, 

• The  correlation  between  the  type  of  alert  arid  type  of  checklist  applied  to  each  situation  is 
poor. 

In  addition  to  these  facts,  most  pilots  agreed  with  the  following  issues  t 

• The  number  of  alerts,  especially  the  number  of  aural  alerts,  needs  to  be  reduced. 

• Most  aural  alerts,  as  currently  designed,  are  too  loud, 

• Noncritical  alerts  should  be  inhibited  during  high  workload  periods,  such  as  takeoff  and  flare/ 
landing. 

• Selected  alerts  should  be  prioritized. 

• A unique  audio,  visual,  or  combination  audio-visual  method  of  alerting  should  be  associated 
with  each  priority  to  provide  an  Instantaneous  assessment  of  the  situation’s  critloallty. 

• A definite  correlation  between  the  type  of  alert  and  the  type  of  checklist  or  procedure  applied 
to  each  situation  should  be  established.  (Note:  This  does  not  imply  that  a checklist  is  required 
for  each  alert.) 

' A study  of  the  human  factors  data  relevant  to  the  design  of  alerting  systems  was  then  conducted 

(ref.  2).  The  following  pre/Zmlnury  guidelines  resulted: 

• High-priority  alerts  should  be  located  no  more  than  1 5°  from  the  pilot’s  normal  line  of  vision. 
Similarly  caution  signals  should  be  located  no  more  than  30^  from  the  pilot’s  line  of  vision. 
Normal  line  of  vision  is  defined  as  the  line  between  the  pilot’s  eye  reference  point  and  the  cen- 
ter of  the  ADI. 

• High-priority  visual  alerting  devices  should  be  no  less  than  I*^  visual  angle  in  size.  Secondary 
visual  alerts  should  be  no  less  than  0.5°  visual  angle  in  size. 

• High-priority  visual  signals  should  have  a brightness  capability  of  at  least  1 50  ft-L  and  be  twice 
as  bright  as  secondary  displays,  Secondary  visual  alerts  shoidd  have  a brightness  of  at  least  15 
ft-L  and  be  at  least  10%  brighter  than  lesser  priority  displays  in  the  same  area. 

• Automatic  brightness  adjustment  for  varying  ambient  light  conditions  should  be  provided. 


• High-priority  (LEVEL  1)  visual  alerts  should  flash. 

• Each  aural  alerting  signal  should  be  composed  of  two  or  more  widely  separated  frequencies 
in  the  range  from  250  to  4000  Hz. 

• The  maximum  intensity  of  aural  alerts  should  be  IS  dB  above  threshold  noise  level  or  halfway 
between  the  threshold  noise  level  and  1 10  dB.  whichever  is  less.  Threshold  equals  level  at  which 
50%  of  the  alerts  are  detected. 

• Automatic  Intenaity  adjustment  for  varying  ambient  noise  conditions  should  be  provided. 

• Aural  alerts  should  be  presented  dlchotically  to  the  pilot's  dominant  ear.  If  dlchotic  separation 
Is  not  pokslble.  the  source  of  aural  alert  signals  should  be  located  90°  from  the  primary  sources 
of  Interfering  noise  or  messages. 

• Intermittent  sounds  should  be  used  for  aural  alerts. 

• Aural  alerting  messages  (voice  annunciations)  should  be  preceded  by  an  identifier  to  which  the 
pilot  Is  more  than  normally  sensitive. 

• Voice  warnings  should  be  used  only  to  annunciate  highest  priority  situations. 

• Voice  warning  messages  should  be  constructed  of  short  sentences  of  polysyllabic  words. 

• Pilots  should  be  familiar  with  all  voice  warning  messages. 

• Use  of  tactile  alerts  should  be  minimized. 

A method  of  prioritizing  the  alerting  functions  was  then  sought.  Criteria  defining  the  priority  cate* 
gorles  are  presented  In  table  1 . These  priority  categories  were  applied  to  the  alerting  systems  data 
collected  at  the  beginning  of  this  study,  i.e.,  the  alerts  were  categorized  as  shown  in  section  2.3,2. 
During  application  of  theae  alert  priority  criteria,  it  was  noted  that  the  LEVEL  3 and  LEVEL  4 
alerts  were  very  sensitive  to  the  peculiar  design  characteristics  of  each  aircraft.  Thus,  it  was  recom- 
mended that  ^ert  priority  guidelines  be  established  only  for  the  LEVEL  1 and  possibly  some 
LEVEL  2 alerts,  and  that  the  airframe  manufacturers  and  operators  deflne  the  LEVEL  3 and 
LEVEL  4 priorities  for  each  type  of  aircraft. 

The  results  of  the  alerting  systems  data  analyses,  the  pilot  surveys,  the  human  factors  guidelines 
study,  and  the  alert  prioritization  study  were  combined  to  formulate  preliminary  recommendations 
for  standardization  of  alerting  methods.  A synopsis  of  the  proposed  guidelines  for  alerting  methods 
is  presented  in  table  1 . Complete  listing  of  the  recommended  guidelines  is  presented  In  section  2.5. 1 , 
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Table  1 Guidelines  for  Standardization  of  Alerting  Functions  and  Methods 
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The  recommended  guidelines  should  be  interpreted  as  (1)  preliminary,  not  final,  ^ 
design  guidelines,  and  (2)  design  objectives,  not  minimum  performance  standards. 

At  this  time,  the  recommended  design  guidelines  are  only  partially  substantiated 
by  quantitative  data.  Additional  testing  to  derive  directly  applicable  human  fac- 
tors data,  additional  comparative  testing  of  elements  of  alerting  systems,  addi- 
tional comparative  testing  of  full  alerting  system  concepts  and  an  analysis  of  the 
hardware/implementatlon  impact  of  these  concepts  are  required  to  complete  and 
validate  the  proposed  design  guidelines. 
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2.0  TECHNICAL  REPORT 


The  methods  of  analysis  used  in  studying  this  alerting  system  problem,  the  data  used  in  and  resulting 
from  these  analyses,  and  the  conclusions  derived  thereftom  are  presented  in  this  section.  This  study 
was  divided  Into  five  tasks: 

• Tabulating  current  alerting  methods  and  requirements 

• Establishing  alerting  function  requirements 

• Developing  a method  for  categorizing/prioritklng  alerting  functions 

• Developing  human  factors  design  guidelines  for  alerting  systems 

• Developing  recommendations  for  standardization  of  alerting  functions  and  methods 

The  first  task  consisted  of  selecting  a baseline  aircraft  configuration  for  each  basic  type  of  turbo* 
jet  transport  used  In  the  U.S,,  tabulating  the  physical  characteristics  of  all  alerting  functions  in  these 
aircraft,  and  analyzing  the  implementation  differences  between  the  various  types  of  aircraft.  The 
second  task  consisted  of  reviewing  applicable  standards,  accident  data,  maintenance  and  operations 
records  concerned  with  current  alerting  systems  problems,  and  checklists  in  an  attempt  to  establish 
functional  requirements  for  alerting  systems.  The  third  task  consisted  of  numerous  discussions  with 
pilot  organizations  to  obtain  a consensus  of  pilot  opinions  on  how  an  optimum  aircraft  warning  iys> 
tern  would  be  designed  and  then  correlating  the  results  of  these  meetings  with  the  results  of  the 
requirements  analyses  to  develop  a rationale  for  categorizing  and  prioritizing  the  alerting  functions. 
In  the  fourth  task,  a literature  search  for  human  factons  data  applicable  to  alerting  systems  was  per* 
formed,  a survey  of  human  factors  data  requirements  was  made,  and  a set  of  test  plans  aimed  at 
obtaining  the  missing  data  were  developed.  The  requirements,  categorization/prlorltlzatlon  rationale, 
and  existing  human  factors  design  guidelines  were  then  combined  to  develop  recommendations  for 
standardization  of  alerting  methods.  The  details  of  each  of  these  subtasks  are  presented  in  the  fol* 
lowing  sections. 


2. 1  CURRENT  ALERTING  METHODS 

A data  base  consisting  of  tabulations  of  the  characteristics  of  the  alerting  subsystems  In  each  basic 
type  of  commercial  turbojet  transport  airplane  was  established  to  analyze  differences  between 
various  types  of  aircraft  and  to  correlate  pilot  comments  with  specific  design  features.  From  these 
analyses,  alerting  system  characteristics  that  appear  to  be  either  good  and  should  be  retained,  or  bad 
and  should  be  avoided  were  discerned.  Descriptions  of  the  duto  base,  analyses,  and  results  of  this 
effort  follow. 

2.1 .1  BASELINE  AIRCRAFT  CONFIGURATIONS 

Aircraft  types  used  by  each  maior  U.S.  and  European  airline  were  tabulated  us  sliown  in  table  2. 
The  quantity  of  each  type  of  aircraft  operated  by  several  of  these  airlines  was  also  tabulated.  From 
this  tabulation,  aircraft  from  several  airlines  operating  a broad  range  of  aircraft  and  a signlflcunt 
number  of  each  type  of  aircraft  were  selected  to  use  us  baseline  configurations.  The  airlines  and  air- 
craft selected  for  this  purpose  are  specified  in  table  3.  Airbus  (A300)  and  Concorde  data  also  were 
souglit  but  were  not  available  In  sufficient  detail  to  be  useful  to  this  study. 
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Table  2 Aircraft  Types  Used  by  Airline 
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DATASOURCE:  NOTE  1 . X INDICATES  AIRLINE  USES  THIS  TYPE  AIRCRAFT 

2.  ( I INDICATES  NUMBER  OF  AIRCRAFT  OF  THIS 

WORLD  COMMERCIAL  AIRCRAFT  INVENTORY  TYPE  OPERATED  BY  THE  AIRLINE. 

(DATA  AS  OF  JUNE  30.  19751 
DOUGLAS  AIRCRAFT  COMPANY 
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DATA  SOURCE:  NOTE:  1.  X INDICATES  AIRLINE  USES  THIS  TYPE  AIRCRAFT 

2.  ( ) INDICATES  NUMBER  OF  AIRCRAFT  OF  THIS 

WORLD  COMMERCIAL  AIRCRAFT  INVENTORY  TYPE  OPERATED  BY  THE  AIRLINE. 

(DATA  AS  OF  JUNE  30,  1975) 

DOUGLAS  AIRCRAFT  COMPANY 


Ideally  all  aircraft  uied  In  developing  the  baaeline  configuration  data  would  have  been  from  one  alr> 
line  to  eliminate  airline-to-^irllne  differences  from  the  data.  A mixture  of  airlines  had  to  be  used 
because  no  single  airline  operated  all  the  aircraft  covered  by  the  study.  Thin  mixture  of  aircraft  from 
several  airlines  caused  small  biases  in  the  comparative  data  that  reflect  airline  differences,  not  basic 
aircraft  differences.  Comparisons  of  the  alerting  system  features  in  various  aircraft  from  one  airline 
should  be  valid,  but  comparisons  between  aircraft  from  several  airlines  must  be  made  with  cogni- 
zance of  these  differences.  In  general  therefore,  comparisons  of  the  aircraft  alerting  systems  data 
must  be  analyzed  with  caution. 

2.1.2  ALERTING  FUNCTIONS 

Aircraft  system  malfunctions  and  operational  situations  for  which  alerts  are  provided  vary  as  a func- 
tion of  the  size  of  the  aircraft,  type  of  operations  for  which  the  aircraft  is  used,  and  cockpit  design 
features  specified  by  the  first  mxJor  customer  of  each  new  aircraft  type.  As  an  example,  a four-engine 
747  might  be  expected  to  have  approximately  twice  as  many  alerts  as  a two-engine  737  because  both 
aircraft  were  designed  during  the  same  time  period  (1964-1968).  However,  the  747  has  substantially 
more  than  twice  the  number  of  alerts  of  the  737.  The  differences  are  due  to  the  groundrules  to  which 
the  cockpits  were  designed; 

737  Significant  automation  of  systems  controls  to  be  compatible  with  the  workload  capabili- 
ties of  a two-man  crew 

747  Maintain  similarity  with  707  cockpit  to  allow  easy  transition  of  senior  707  crews  to  the 
747 


Because  these  variations  are  not  predictable,  a detailed  tabulation  of  the  type  of  alerts  used  for  each 
function  in  these  aircraft  was  constructed. 

The  alerting  function  tabulations  specilV  the  number  and  type  of  alerts  used  for  each  function.  A 
sample  of  this  tabulation  is  provided  in  figure  l.The  complete  tabulation  is  provided  in  appendix  A. 

Three  new  terms  requiring  deHnltion  have  entered  the  discussion  now,  i.e.,  alert,  alerting  flmctlon. 
and  alerting  devices,  An  alert  is  the  activation  of  any  aural  alarm,  indicator  light,  or  flag.  The  term 
alert  includes  the  situation  wherein  a pointer  or  tape  on  an  analog  indicator  displays  a parameter 
value  in  the  green,  yellow,  orange,  or  red  band  range,  Alerting  functions  are  the  operational  situa- 
tions or  aircraft  system  conditions  annunciated  to  the  crew.  More  than  one  alerting  function  gener- 
ally exists  for  each  basic  alerting  situation.  The  727,  for  example,  has  three  alerting  functions  for 
engine  Are  warning.  Alerting  devices  are  the  physical  devices  used  to  annunciate  alerts.  Note  that  a 
separate  alerting  device  is  not  provided  in  the  cockpit  for  each  alerting  function  speoiAed  in  the 
tabulation.  In  many  cases,  a specific  alerting  device  will  perform  several  alerting  functions.  An 
example  of  this  type  of  situation  is  a multicolor  light  that  illuminates  green  to  indicate  a system  is 
ON  and  amber  to  indicate  tlie  system  is  armed  or  has  malfunctioned.  Therefore  each  alrcraA  type 
would  in  general  have  fewer  physical  alerting  devices  than  alerting  functions. 

2.1.3  CHARACTERISTICS  OF  ALERTING  SIGNALS 

No  consistent  utilization  philosophy  has  been  applied  to  the  alerting  systems  in  the  types  of  oircraA 
covered  by  this  study.  Even  within  each  olrAamer’s  product  line  of  aircraft  and  each  operator's  al^ 
craA,  numerous  inconsistencies  in  the  utilization  of  the  alerting  systems  appear.  These  differences 
were  analyzed  by  searching  the  alerting  function  tabulations  for  comparable  alerting  situations  and 
noting  the  similarities  or  differences,  The  rationale  behind  obvious  differences  was  then  investigated. 
These  observations  were  combined  with  analyses  of  several  dissections  of  the  data  in  the  alerting 
function  tabulations.  In  particular  the  alerting  systems  data  were  dissected  to  analyze  the  following 
characteristics  of  the  alerts: 

• Operational  distribution 

• Mechanical  distribution 

• Color  distribution 

• Aural  alert  applications 

• Color  of  visual  alerts  associated  with  aural  alerts 

• Aircraft  systems  causing  the  proliferation  of  alerts 

• Effects  of  a master  caution  and  master  warning  subsystems  on  the  overall  alerting  system  design 

• Effects  of  alert  prioritization  and  inhibits  on  the  overall  alerting  system  design 

The  results  of  these  analyses  were  then  combined  to  develop  guidelines  for  categorlzlng/prioritlzing 
and  designing  alerting  systems  in  future  aircraft.  Each  of  these  analyses  is  discussed  individually  in 
the  following  sections. 


Alerting  function 


Figure  1 Alerting  Function  Tabulation  Example 


2.1 .3.1  Operational  Distribution  of  Visual  Alerts 


Three  alert  clasiiflcations,  defined  in  table  4,  were  eitabllihed  to  allow  analysis  of  differences  in 
the  operational  distribution  of  visual  alerts. 

The,  term  "bands”  in  these  definitions  includes  radial  arcs  and  "tick  marks”  on  round  dial  and  pointer 
displays,  and  linear  bands  on  horizontal  or  vertical  scale  displays. 

Some  engineers  contend  that  since  instruments  and  advisory/status  lights  are  often  fbnetlonally 

interchangeable,  all  informational  functions  contained  within  the  instruments  also  should  be  tabu* 

lated  under  the  advisory/stitus  alert  classification.  However,  basic  instruments  do  not  pollute  the 

visual  environment  of  the  alerting  system  in  the  same  manner  u extraneous  lights  or  flags.  Only  the 

parameter  limit  information  (bands)  on  the  instruments  was  considered  to  have  a significant  Impact 

on  the  visual  effectiveness  of  the  alerting  system.  Thus  the  basic  informational  functions  of  the  ^ 

instruments  were  not  Included  in  these  analyses. 

Figures  2 and  3 specify  the  total  number  of  alerting  functions  on  these  aircraft  and  the  historical 

application  of  these  alerts.  Figures  4 and  S specify  the  number  of  visual  alerting  functions  on  each 

baric  type  of  aircraft  that  fall  within  each  of  these  classifications  and  the  ratio  of  visual  alerting  func* 

tlons  in  each  classification.  These  data  are  also  presented  in  tabular  form  in  appendix  B (tables  B-1  i 

and  B-2).  \ 

i 

Analyses  of  these  data  for  alerting  system  differences  as  a function  design  vintage,  aircraft  size,  and  ^ 

types  of  usage  were  made,  The  number  of  engines  on  these  aircraft  was  used  to  group  the  aircraft  | 

into  usage  categories.  These  usage  categories  were  selected  because,  in  general,  two-engine  aircraft 
are  used  o..  short-haul  operations,  three-engine  aircraft  are  used  on  medium-range  operations,  and  i 

four-engine  aircraft  are  used  on  long-range  operations.  These  categories  also  conveniently  provide  : 

groups  of  aircraft  with  a similar  number  of  onboard  systems,  e.g. , same  number  of  hydraulic  systems, 

Figures  2 and  3 illustrate  that  at  least  among  the  two-engine  aircraft,  the  number  of  visual  alerting 
functions  Increased  with  each  new  aircraft  type.  The  question  that  arises  is  whether  this  increase 
was  due  to  an  increase  in  the  number  of  regulatory  requirements  or  basic  philosophical  differences 
between  the  manufacturer's  cockpit  designers.  A quick  survey  of  the  FARs  ini^icated  that  a signifi- 
cant number  of  new  regulations  that  affected  alerting  systems  evolved  between  the  BAC-1 1 1 and 
737  design  eras.  The  DC-9  was  designed  2 years  after  the  BAC-1 1 i and  the  737  was  designed  4 yean 
after  the  BAC-1 1 1 ; however,  not  all  this  increase  was  due  to  new  regulatory  requirements.  Thus  the 
growth  in  the  number  of  alerting  functions  as  a function  of  time  among  the  two-engine  aircraft  is 
attributed  to  both  differences  in  the  alrframers’  cockpit  design  philosophies  and  new  regulatory 
requirements. 
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FIgun  2 Number  of  VltiMl  Altrting  Functlom  on  Etch  Bmlc  Ainrtft  Typo 


Among  the  three-engine  aircraft,  a similar  trend  toward  increasing  the  number  of  alerting  functions 
was  noted.  In  general,  the  727,  DC-10,  and  L-1011  have  the  same  number  of  systems  of  each  type, 
e.g.,  all  have  three  main  electrical  generator  systems.  However,  in  a few  cases,  such  as  air  conditioning, 
the  number  of  channels  was  increased  from  two  for  the  727  to  three  for  the  DC-10  and  L-lOll. 
Their  difference  in  size  (narrow  body  727  versus  wide  body  DC-1 0 and  L-1 0 1 1 ) may  have  InHuenced 
these  statistics.  The  increased  use  of  late  technology  and  more  complex  systems  may  also  have  attri- 
buted to  the  growth  in  the  number  of  alerting  functions.  As  an  example,  on  McDonnell  Douglas 
aircraft,  all  narrow  body  aircraft  had  a mechanical  flap  blow-back  system;  the  DC-10,  for  weight- 
savings  reasons,  utilized  a more  complex  but  lighter  electronic  flap  blow-back  system.  Two  addi- 
tional annunciator  lights  were  required  with  the  electronic  system.  Additionally,  between  the  727 
and  DC-lO/L-1011  design  eras,  a significant  number  of  regulatory  requirements  were  added.  The 
interaction  between  these  factors  is  not  known;  the  increase  in  the  number  of  visual  alerting  func- 
tions among  three-engine  aircraft  must  be  attributed  to  all  these  factors. 
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*L-101 1 utilizn  lighted  pushbutton  switches  with  color  modes  to  indicete  switch  state  in  place  of  toggie  switches. 


Figure  4 Operatiorta!  Distribution  of  Visual  Alert  Functions 
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*L-101 1 utilizes  lighted  pushbutton  switches  with  color  modes  to  indicate  switch  state  in  place  of  toggle  switches. 


Figure  5 Percentage  Distribution  of  Visual  Alert  Functions  Among  Operational  Classifications' 
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The  707  and  DC-8  were  designed  with  approximately  the  same  number  of  alerting  functions.  The 
747,  which  was  designed  12  years  later,  emerged  with  a significant  increase  in  the  number  of  alert- 
ing fUnctioni.  In  general,  the  747  required  more  channeli  of  each  type  of  lyitem  than  the  707  or 
DC-8.  This  waa  primarily  because  of  Its  maulve  size  as  compared  to  the  707  or  DC-8.  McDonnell 
Douglas  claims  that  a si^lflcont  portion  of  the  Increase  In  the  number  of  alerting  functions  on  the 
wide  body  aircraft  Is  attributable  to  the  application  of  modem  'welght-aavlngt  technology.  More 
complex  but  lighter  systems  were  often  used  to  save  weight  on  the  wide  body  aircraft.  The  wide 
body  aircraft  also  had  to  contend  with  a significant  number  of  now  regulatory  requirements  that 
emerged  between  1957  and  1969,  Therefore,  the  cause  of  the  Increase  in  the  number  of  alerting 
functions  among  the  four-engine  aircraft  can  he  attributed  to  the  size  of  aircraft,  use  of  more  com- 
plex systems  on  the  wide  body  aircraft  to  save  weight,  and  additional  regulatory  requirements. 

In  the  foregoing  discussion  It  was  concluded  that  the  number  of  alerting  fimotlona  in  the  cockpit 
Increased  as  a fiinotion  of  time.  The  question  that  arises  Is  **what  type  of  alerts  were  added  and  how 
did  the  alert  dlstributiotts  change  wl&  these  additions?**  The  data  presented  in  figures  4 and  5 for 
two-engine  aircraft  Indicate  that  the  DC-9  and  737  designs  Incorporated  substantially  more  caution 
and  advisory  alerts  than  the  BAC-1 1 1.  All  three  airotaft  rely  approximately  equally  on  caution-type 
alerts  as  diown  by  the  percentage  distribution  curves.  However,  the  BAC-1 11  alerting  system  design 
relies  heavily  on  warning  functions  whereas  the  737  relies  heavily  on  advisory  functions. 

Among  the;  three-engine  aircraft,  a significant  growth  in  the  number  of  alerting  functions  firom  the 
727  to  the  DC-10  and  L-101 1 Isagainnotedlntheiedata.  However,  the  ratio  ofwamlnp-to-cautlons- 
to-advisories  did  not  change  appreciably. 

Note  that  many  of  the  advisory  functions  in  the  L-101 1 data  have  no  equivalent  alerting  function  In 
the  727  or  DC-10  because  the  L-101 1 cockpit  design  utilized  lighted  pushbutton  switches  with  color 
or  ON/OFF  iUumlnetion  modes  to  indicate  switch  state  in  place  of  conventional  toggle  switches. 
These  lighted  pushbutton  switches  were  generally  considered  to  be  advisory-type  alerting  functions 
whereas  the  toggle  switches  were  presumed  to  have  no  alerting  function,  If  these  functions  on  the 
L-101 1 were  deleted  from  the  data  to  at  to  get  more  equivalent  sets  of  data,  the  L-101 1 would  have 
heavier  reliance  on  warning  and  caution  functions  than  the  727  or  DC-10. 

The  Increase  In  the  number  of  alerting  functions  from  the  707/DC-8  aircraft  to  the  747  Is  alto 
evident  In  the  four-engine  aircraft  data  presented  In  figure  4.  The  747  alerting  system  design  incor- 
porates approximately  the  same  number  of  warnings,  substantially  more  cautions,  and  also  substan- 
tially more  advisories.  On  a percentage  distribution  basis,  the  747  relies  the  least  of  any  four-engine 
commercial  transport  on  warning  functions,  approximately  the  same  as  older  designs  on  caution-type 
alerts  and  more  heavily  on  advisory-type  alerts  than  older  four-engine  transports. 

From  these  analyses  three  significant  factors  were  noted: 

• Each  new  alrciaft  has  incorporated  more  alerting  functions  than  previous  similar  aircraft 
because  of; 

( 1 ) Differences  in  the  operators*  alerting  system  utilization  philosophies 

(2)  Differences  In  the  airframers*  cockpit  design  philosophies 

(3)  Additional  regulatory  requirements 


(4)  Increased  size  of  the  later  vintage  aircraft 

(5)  Use  of  more  complex  systems  to  save  weight 

• Number  of  warning-type  alerts  used  in  commercial  turbojet  transport  aircraft  nearly  doubled 
in  the  transition  from  narrow  body  aircraft  to  wide  body  aircraft. 

• Number  Of  caution*  and  advlaory*type  alerts  used  in  commercial  turbojet  transport  aircraft  hiu 
Ihereiied  lubstantially  with  each  new  aircraft  design. 

2.1. 3.2  Mechanical  Dlatrlbutlon  of  Alerts 

Trends  in  the  type  of  meohanioal  devices  used  to  present  the  alerts  were  analyzed  by  dissecting  the 
alerting  function  information  Into  the  following  categories; 

• Distribution  of  the  alerts  between  lights,  aurals,  flags,  and  bands  as  a function  of  type  of  ai^ 
ci;aft  operation  (short  haul,  medium  range,  long  range),  aircraft  size,  and  aircraft  vintage. 

• Amount  of  multif\inctioning  of  the  alert  devices. 

From  these  analyses,  characteristics  of  the  alerting  systems  that  are  considered  good  and  should  be 
retained,  or  causing  problems  for  the  pilots  and  should  be  eliminated,  were  sought. 

Figure  6 specifies  the  number  of  alerting  functions  to  which  each  basic  type  of  alerting  device  has 
been  applied.  Figure  7 presents  the  same  data  as  a function  of  aircraft  vintage,  In  the  analysis  of 
these  data,  it  was  noted  that  among  two*englno  short*haul  aircraft,  the  737  and  DC*9  alerting  sys- 
tems incorporate  significantly  more  lights  and  bands  than  the  BAC*1 11.  However,  the  application 
of  aurals  and  flags  Is  approximately  equal  in  these  two-engine  aircraft. 

The  difference  in  the  number  of  lights  Incorporated  In  these  cockpits  is  duo  primarily  to  the  cock- 
pit design  philosophy  applied  to  these  aircraft,  Tiie  design  philosophy  on  the  BAC-1 1 1 appears  to 
have  been  “keep  the  cockpit  very  simple-give  the  pilots  Just  enough  information  to  fly  the  airplane, 
don't  provide  detailed  subsystem  operation  information  that  the  pilots  have  no  control  over,  and 
don't  burden  them  with  maintenance  Information."  In  contrast  to  this  philosophy,  the  DC-9  and 
737  cockpits  appear  to  have  been  designed  to  provide  the  crew  with  more  detailed  subsystem 
information  (more  lights  and  bands)  so  that  the  pilots  can  try  to  resolve  malfunctions  in  flight  and 
can  record  better  maintenance  data,  Additionally,  the  DC-9  and  737  had  to  meet  more  regulatory 
requirements  as  noted  earlier. 

The  three-engine  aircraft  data  Indicate  that  discrete  lights  were  used  In  place  of  round  dial  instru- 
ment alert  bands  on  the  L-lOi  1.  The  newer  wide  body  three-engine  aircraft  also  used  more  flap 
than  older  narrow  body  aircraft.  This  is  probably  due  to  more  complex  autopilot  and  avionics 
systems. 

The  four-engine  aircraft  data  indicate  similar  trends.  The  increase  in  the  number  of  alerting  func- 
tions on  the  747  over  707/DC-8  vintage  aircraft  occurred  primarily  in  the  number  of  lights  used  to 
annunciate  detailed  subsystem  Information.  A slight  decrease  In  the  number  of  colored  bands  used 
to  annunciate  alerts  accompanied  this  increased  dependence  on  discrete  alert  lights. 
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The  total  number  of  alert  Ughti.  aurali.  flegi,  and  bands  may  have  changed  lignlfloantly  from  one 
aircraft  to  another.  However,  the  proportionate  mixture  of  types  of  alerting  devices  did  not  change 
slgnlflcantly  between  aircraft.  Figure  8 illustrates  this  situation  for  alert  lights.  ^ 

The  aircraft  vintage  data  presented  in  flgure  7 indicate  that  among  the  narrow  body  aircraft  no 
signlfloant  change  in  the  number  of  alert  lights,  aurals,  flap,  or  bands  occurred.  Aircraft  sise,  types 
of  operation,  and  vintage  had  not  effect  on  the  design  of  alerting  systems  during  this  era.  However, 
the  wide  body  aircraft  utilize  substantially  more  alert  lights  and  flap  than  narrow  body  aircraft. 
The  wide  body  aircraft  also  rely  slightly  more  on  aural  alerts  than  narrow  body  aircraft.  The  use  of 
color  bands  as  alert  devices  Increased  with  the  DC-10,  decreased  slightly  with  the  747,  and 
decreased  significantly  with  the  L-101 1.  Thus,  in  general  it  can  be  stated  that  a trend  currently 
exists  toward  incorporating  more  and  more  alerting  devices  into  the  cockpit. 

Figures  9 and  10  illustrate  the  amount  of  multlfunodonlng  of  the  alert  lights  on  these  aircraft. 
MulUfunctlonlng  is  defined  as  any  situation  in  which  an  alerting  device  Is  used  to  annunciate  more 
than  one  hazardous  or  abnormal  situation.  The  distinctions  between  the  various  situations  annun- 
ciated by  a device  could  be  made  by  any  obvious  mode  chanp,  such  as  a color  chanp,  steady  ver- 
sus flashing  or  intermittent  annunciation,  or  a chanp  in  brightness.  The  data  in  these  figures  indi- 
cate that  a trend  toward  more  multifunotioning  exlsta.  The  BAC-1 1 1 and  727  did  not  utilize  multi- 
functioning  whereas  the  wide  body  aircraft  used  considerable  multifunctlonlng.  Increased  usage  of 
multifunction  alert  lights  Is  the  result  of  attempts  to  crowd  more  and  more  information  into  the 
cockpit.  Available  panel  space  became  saturated  and  multifunction  devices  had  to  be  used  to  get 
the  information  into  the  cockpit. 
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Bu«d  pn  thi  raiulti  of  th«M  anilyiei,  th«  alertlna  lyittm  utUlutlon  phlloiophlM  »ppU«d  to  the 
wide  body  eiroreft  ippeer  to  have  Included  the  following  premliei/iuppoiltloni: 


• The  crew  ihould  perform  more  lyitem  debug  and  maintenance  IVtnotloni;  to  do  thla,  more 
detailed  lyatema  Information  needa  to  be  dliplayed. 

• Multlftmotlon  alert  devloei  would  not  degrade  the  effbctlveneii  of  the  alerting  lyitemi. 

• Dliorete  alert  llghti  are  more  effective  than  analog  dliplayi  (dial  type  Initrumenti). 

• A alight  Increaae  In  the  large  number  of  already  exlitlng  aural  alerti  would  not  degrade  the 
effectlveneia  of  the  alerting  lyitem. 

• The  nanow  body  aircraft  cockpit  deilgni  did  not  saturate  the  crew.  A typical  crew  can  handle 
lubitantlally  more  complex  situations  than  exists  on  narrow  body  aircraft. 


The  validity  of  these  premises  will  be  discussed  in  further  detail  in  later  sections. 
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2.1 .3.3  Color  Distribution  of  Visual  Alerts 


Red,  fire  orange,  and  dayglow  orange  colored  alerti  are  generally  used  to  present  warnings;  amber 
and  yellow  colored  alerts  are  used  to  present  caution;  and  blue,  green,  or  white  colored  alerts  are 
used  to  present  advisories  and  status  indications,  More  specifically,  blue  alerts  usuidly  Indicate  that 
something  is  Intransit,  green  alerts  usually  Indicate  that  a system  is  operating  satisfactorily  and/or 
has  attained  a SAFE/GO  status;  and  white  alerts  usually  indicate  a system  is  ON.  The  distribution 
of  alerts  among  these  colors  was  analyzed  to  determine  whether  a trend  toward  presenting  any  par- 
ticular type  of  Information  exists.  To  perform  these  analyses,  the  alerting  fVinctlons  data  was  again 
dissected  into  the  type  of  aircraft  operation,  size  of  aircraft,  and  vintage  of  the  aircraft. 

These  data  are  presented  in  graphical  form  in  figures  1 1 through  14  and  in  tabular  form  in  appendix 
B (table  B-3). 

The  data  in  figure  1 1 indicate  the  following  significant  factors; 

• Essentially  no  difference  between  aircraft  in  the  application  of  red  lights 

• L‘101 1 and  747  aircraft  rely  on  amber/yellow  lights  more  heavily  than  other  aircraft 

• BAC-l  1 1 utilizes  very  few  blue  lights 

• 737,  747,  and  DC-10  aircraft  rely  more  heavily  on  green  annunciators  than  all  other  aircraft 

• L-101 1 aircraft  use  white  lights  extensively  (to  replace  conventional  toggle  switch  functions) 

The  data  in  figure  12  indicate  that  the  wide  body  aircraft  use  significantly  more  red  flags  than 
narrow  body  aircraft  and  the  707  uses  substantially  more  white  flap  than  other  aircraft.  The  heavy 
reliance  on  red  flap  in  the  wide  body  aircraft  is  due  to  incorporation  of  more  complex  autopilot 
and  navigation  systems.  The  707  occasionally  used  white  flags  where  other  aircraft  generally  used 
red  or  amber  lights. 

The  data  on  the  application  of  color  bands  as  alerting  devices  (figure  13)  indicate  that  the  DC-10 
utilizes  substantially  more  amber/yeilow  bands  than  other  aircraft,  the  L-101 1 does  not  utilize 
green  bands,  and  L-IOl  1 and  BAC-1 1 1 aircraft  utilize  very  few  bands. 

Analyses  of  the  historical  application  of  alert  colors  (figure  14)  revealed  significant  trends  toward 
more  amber/yellow  and  white  lights,  more  red  flags,  and  fewer  red  and  green  bands.  The  increase  in 
amber  lights  Is  due  to  requirements  for  more  detailed  subsystems  information  in  the  cockpit.  More 
red  flags  are  being  incorporated  because  of  more  complex  autopilot  and  navigation  systems  in  the 
newer  aircraft.  The  traditional  red  and  green  bands  are  being  replaced  by  amber  lights. 

The  following  conclusions  were  derived  from  these  analyses: 

• The  number  of  warnings  has  Increased  slightly  because  of  red  flap  thot  are  required  to  annun- 
ciate the  new  failure  modes  of  more  complex  autopilots  and  navigation  systems 


as 


• Airber  and  yellow  lights  are  being  used  more  extensively  with  each  new  generation  of  aircraft 
to  annunciate  detailed  lubiyatem  operations 

• A trend  toward  annunciating  more  SAFE  and  GO  conditions  with  green  lights  exists 

• White  lighted  pushbuttons  are  being  used  more  extensively  in  place  of  toggle  switches  in  each 
new  generation  of  aircraft. 

• Discrete  alert  lights  are  being  used  to  replace  traditional  color  bands 
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Ffgun  13  Color  Distribution  of  Bands 
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2. 1.3 .4  Aural  Alert  Applications 

Table  5 provides  a listing  of  the  various  situations  for  which  aural  alerts  are  used.  For  each  situation 
listed,  the  type  of  aural  alert  used  on  each  aircraft  type  is  specified.  Where  it  could  be  determined 
that  no  aund  alert  is  provided  for  the  situation,  “none"  is  entered:  if  it  could  not  be  determined,  the 
space  is  blank, 

From  this  table,  it  is  noted  that  all  aircraft  considered  in  this  study  use  a bell  to  annunciate  an 
engine  fire,  However,  the  characteristics  of  the  bell  vary  from  one  aircraft  to  another.  Similar  situa- 
tions exist  among  All  the  other  aural  alerts.  Thus,  another  listing  (table  6)  that  describes  the  fre- 
quency, loudness,  and  continuity  characteristics  of  each  specified  aural  alert  is  provided. 


The  cockpit  ambient  noise  environment  in  which  these  aural  alerts  must  function  is  specified,  as  a 
point  of  reference,  in  table  7.  The  ambient  noise  levels  specified  in  this  table  represent  the  maxi- 
mum average  octave  band  value  within  the  specified  frequency  ranges.  These  values  were  taken  from 
the  cockpit  noise  curves  provided  In  appendix  C. 

Examination  of  these  data  for  (I)  consistency  of  application,  (2)  factors  that  may  contribute  to 
confusion  in  the  cockpit  and  should  be  avoided  in  the  design  of  future  alerting  systems,  and  (3) 
aural  alerts  that  have  been  standardized  on  and  should  be  retained,  revealed  the  following  facts; 


No  consistent  utilization  philosophy  has  been  applied  to  the  aural  alerts,  not  even  within  any 
airframer's  or  operator’s  aircraft. 

■ t! 

The  number  of  aural  alerts  is  increasing.  Older  narrow  body  aircraft  incorporated  9 to  1 S aural 
alerts  and  newer  wide  body  aircraft  have  14  to  17  aural  alerts.  Human  factors  data  Indicate 
that  pilots  can  rapidly  and  accurately  interpret  only  a limited  number  of  discrete  aural  alerts 
and  that  this  number  decreases  as  a function  of  time  since  recurrent  training.  The  exact  num- 
ber of  alerts  that  the  average  pilot  can  effectively  recognize  is  not  known.  However,  the  poten- 
tial for  conAision  is  known  to  exist  currently  and  should  be  eliminated. 


A standard  appean  to  have  been  established  for  the  following  aural  alerts: 


Alert  Situations 

Engine  fire 
Excessive  airspeed 
Unsafe  landing  condition 
Unsafe  takeoff  condition 
Ground  proximity 


Type  of  Aural  Alert 

Bell 

Clacker 

Horn 

Horn 

Warbler  and  voice  message 
or  tone  and  voice  message 


The  specific  characteristics  of  the  aural  alerts  used  for  each  of  these  situations  varies  slightly 
but  the  basic  function  appears  to  be  identical  in  all  cases. 
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Table  5 Summary  of  Currently  Used  Cockpit  Aura!  Alerts 

Type  of  aural  alert  applied 
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Characteristics  unknown 
Not  delivered  but  available 


Table  5 Summary  of  Currently  Used  Cockpit  Aura!  Alerts  (Cont) 
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Warbler 
& voice 

Chime  J 
Chime  H 

Clacker  B 

None 

None 

Clacker 



Horn  A 

Horn  E 

Horn  A 

UJ 

c 

o 

X 

Bell  A 

707/727 

Warbler 
& voice 

None 

None 

Voice 

Horn  E 

Warbler 
& voice 

Chime  J 

Clacker  B 

Belt  A 

None 

Clacker 

None 

None 

Horn  A 

Horn  E 

Bell  A 

Airplane 

Alert  condition 

Excessive  terrain  closure  rate 

Flap  load  relieve  inoperative 

Galley  overheat 

Inadvertent  "duck  under"  GS 

Low  cabin  pressure 

Negative  climb  after  takeoff 

SELCAL 

Instrument  comparator  alert 

Smoke  in  cargo  area 

1 Smoke  in  lower  galley 

Stabilizer  in  motion 

Unsafe  ground  condition 

Unsafe  in-flight  condition 

Unsafe  landing  condition 

Unsafe  takeoff  condition 

Wheel  well  overheat  or  fire 
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Characteristics  unknown 


r«6/t0  Aural  Altrt  Ch§nct9rltUc$ 


AURAL  ALERT 

FREQUENCY,  Hi 

LOUDNESS, 

dB 

DESCRIPTION 

HORN  A 

200  TO  443 

901  6 

Contlnuoui 

HORNS 

220  TO  280 

nraii 

Contlnuoui 

HQRNC 

B3B 

89  .. 

dontinuoui 

MdNN  6 

8oSTAN5«i7 

M^6 

Contlnuoui 

TRJWKTE 

!!o6f0  443 

Bfl  1 B 

Itmi  M horn  A,  ixoipi  in^irrupttd 

220  TO  280 

931  6 

Bami  Ni  hern  B,  axoapt  Intarrupttd  it 
3 Hi 

HORNQ 

I ts  AND  260 

Contlnuoui 

h6rn  h 

602  AND  667 

Bama  M horn  D,  iKoapt  Irttarruptacl 
atIHi 

HORN  J 

140 

91 

6n  6,b  laoondi;  off  0.6  laoondi  In  vaflabla* 
Iliad  groupi;  2 laoondi  batwaan  groupi 

‘TOBFl? 

jo 

BB 

On  for  O.B  laoondi:  off  for  1 laoond 

TTSMirt 

MB 

64  TO  96 

IntarruDtad  at  0.6  Hi 

HORN'M 

626 

96 

IntafruDtad  at  0.6  Hi 

h6rn 

326  AND  390 

64 

Tow  tonal  altarnatlna  at  0,26  Hi 

HORNP 

"Ooi|a''  horn 

h6rn  r 

300 

BB  "■ 

CohtJhudUi 

HORNS 

300 

90 

333-mi  parlod  with  a 60K  duty  oyola 

TONE  A 

1000 

Contlnuoui 

TONES 

2600  ± 300 

6di  6 

Baapar  torn,  puliatirig  at  1 .6  to  6.0  Hi 

TSFIETS 

800 

INCREASING 

Tona  that  Inoraaiai  In  voluma  ovar  a 
3>iaoond  parlod 

TONED 

"^oo 

INCREASING 

Naw  lyitam  for  MoDonnall  Douglai 
airplanai,  applloation  unoartain 

TONE  E 

1.4kt6  2.6  k 

9& 

Altarnitlng  tona 

TONEF 

3K 

77 

333'mi  parlod  with  a 60%  duty  eyela 

TONED 

700  TO  1,7  k 

BO 

Puliatlng  tona 

TONEH 

1.0  K 

Puliatinu  tona 

"C"  CHORD  A 

461  TO  663  667  TO  704 
691  TO  846 

961  6 

Intarmittant 

"C"  CHORD  B 

612,640,  768 

90 

Sound  duration  2 lacondi 

BUZZER  A 

300,  e.00,  AND  900 

90  ± 6 

BUZZER  B 

90 

81 

2 laoondi 

WARBLERS* 

VOICE 

400  TO  800 

86  TO  96 

Thrta  "whoopi"  par  laoondi  followad  by 
voloa  saying  “pull  up."  Soma 
of  tha  alrplann  Indloitad  do  not  hava 
thli  lyitam  and  loma  hava  tha  warblar 
without  voloa 

WAILER  A 

130  + 20  TO  200  + 30 

93  1 3 

2 to  4 Hz  of  variation  batwaan  longar 
and  highar  fraquanciai-mlnlmum 
variation  49  Hi-mod  4.76  Hz 

WAILER  B 

640 

WAILER  C 

130  TO  200 

88 

BELLA 

600  TO  10,000 

' M±  6 

Contlnuoui 

BELLB 

760 

87 

dontlnuoui;  itrllcar  fraquanoy,  1.Q  Hz 
ilmllar  to  talaphone 

BELLC 

640  AND  648 

Contlnuoui;  two  tonai  altarnating, 
itrlkar  fraquanoy,  12.6  Hz 

BELLD 

600  TO  10,000 

96+6 

^ama  ii  ball  A,  OKcapt  Intarruptad 

90 


Table  6 Aural  Alert  Characteristics  (Conti 


AURAL  ALERT 

PREQUENCV,  Hi 

LOUDNESS, 

dB 

DESCRIPTION  1 

BELLE 

ibo 

CLACKER  A 

1000  TO  2400 

ill 

ModuliMd  It  8 to  10  Ml 

CLACKER  B 

Ripititlon  friquinoy,  1 Hi 

6Lacker  C 

612 

Ripititlon  friqMiney,  4.76  Hi,  loundi 
llki  oluoklno  of  i ehloktn 

CLACKER  D 

TWO  tO^ES.  CLICKS 

84  TO  96 

Ripititlon  friquinoy  , i Mi 

clackIrT 

336 

87 

SImllir  to  1 iquin  wivi,  modulitid 
with  virv  dlitindtivil  olloki  it  10  Hi 

CLACKER  P 

2600 

88 

two  buNti  In  1 20*mi  intirvil 
riMitid  It  1 140*mi  riti 

chImHa 

620 

Ripiitina.  1.6  tieond  ripititlon  riti 

CHIME  B 

760 

WTOW 

Binsli  itroki  9ong>llki  lOundi  whin 
thiohihloi  oilT.  Ihtilfubtid  it  0.86  Hi 

CHIME  C 

4700 

78 

Slngli  itroki  aono>ili(i  sound 

CHIMED 

727  TO  947 

96  4.  6 

"High  ehlmi",  ilngli  itroki  geng>llki 
lound 

CHIME  B 

477  TO  497 

964  6 

"Low  ohimi",  ilngli  itroki  geng>llki 
MUnd 

CHIME  P 

iTi)T6i47ANO 
477  TO  497 

964  6 

Mlgli4ow  ohImi  eemblnitlon  of  ehimii; 
D ind  B ripiitid  iti  riti  of  3 i i Hi 

CHIME  a 

688 

964  6 

"High  ohimi",  ilngli  itroki  gong>llki 
iMnd 

CHIMB  H 

BBS  AND  408 

“TfTT 

Hlgh.|ew  ehimi  not  ripiitid 

CKIMIJ 

B88  AND  488 

■“wri — 

8imi  II  ehimi  H ixMot  fiit  rioiit 

CHIMB  K 

688  AND  488 

M 4“i 

8imi  II  ehimi  H ixoipt  It  doii  two 
eyelM  ind  itopi 

CHIME  L 

Hi fb  ANb 

477  TO  497 

BTTT 

8imi  II  ehimi  P ixeipt  It  don  two 
eyeln  ind  itopi 

CHIME  M 

687 

Elnoli  ehimi  In  moit  eonliouritloni 

CHIME  N 

687/487 

66 

SIngli  highilow  ohimi 

CHIME  P 

487 

86 

Low  ehimi  net  ripiitid 

CLICK 

Aetuil  lound  of  dlieonniet  of  thi 
lutopllet  livir 

THE  SPECIFIED  FREQUENCY  RANGES 


sa 


2.1 .3.5  Color  of  Vkual  Alerts  Associatsd  With  Aural  Alerts 


The  number  of  aural  alerts  has  Increased  to  the  point  where  the  potential  for  oonftision  ekiits,  To 
avoid  confusion  over  the  signifioance  of  an  aural  alert,  cockpit  designers  have  augmented  them  with 
identification  lights.  Figure  15  illuitrates  the  type  of  visual  alerts  that  are  activated  when  aural  alerts 
occur.  These  data  Indicate  that  the  best  correlation  between  the  aural  alerts  and  red  visual  alerts 
exists  on  the  737.  It  is  generally  assumed  that  aural  alerts  are  used  for  high  priority  annunciations 
and  incoming  communication  alerts.  However,  these  data  show  that  a significant  number  of  amber 
and  yellow  alerts  indicating  caution  conditions  also  are  associated  with  the  aural  alerts.  The  blue 
lights  are  associated  primarily  with  Incoming  communication  alerts. 
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Figure  1 6 specifies  the  coior  distribution  of  visual  alerts  associated  with  the  aural  alerts.  The  heavy 
reliance  of  Boeing  707,  727,  and  737  aircraft  on  amber  lights  that  identify  aural  alerts  is  reflected 
In  these  data.  These  data  also  indicate  that  DC-8  and  DC-10  aircraft  utilise  significantly  blue  lights 
than  all  other  aircraft  to  help  identify  aural  alerts. 

The  historical  correlation  between  the  growth  in  aural  alerts  and  the  total  number  of  lights  and  flap 
to  help  identify  the  aurals  was  analysed  from  flie  data  presented  in  figure  17.  These  data  indicate 
that  aU  aircraft,  except  the  BAC-1 1 1,  have  multiple  lights  and  flags  associated  with  each  aural  alerti 
727,  737,  and  DC-10  aircraft  have  signiflcantly  more  vlsiuil  backup  lii^ts  for  each  aural  alert  than 
similar  type  aircraft;  the  BAC-1 11  reUet  teast  of  all  aircraft  on  visual  backup  lights;  and  the  wide 
body  jets  rely  less  than  narrow  body  liicraft  on  visual  backup  lights  even  though  they  have  more 
aural  alerts.  All  aircraft  also  were  r.ored  to  have  several  aural  alerts  that  operate  without  visual 
backup  alerts  as  indicated  in  table  8. 


Ffgun  16  Color  Dlitrtbutlon  of  VliuolAlorti  Tfmt  Aetivato  Auralt 


2.1 .3.6  Aircraft  Syatema  Cauaing  Proliferation  of  Alerts 

Tables  D*1  through  D>9  in  appendix  D specify  the  distribution  of  alerts  used  by  each  subsystem  on 
each  basic  type  of  airplane-  liieae  data  are  summarized  in  figure  1 8 in  a form  that  illustrates  which 
subsystems  are  causing  increases  in  the  number  of  alerts.  Caution  must  be  used  in  interpreting  the 
data  curves  presented  In  this  figure  because  (1)  not  all  systems  incorporated  in  the  newer  model  al^ 
craft  were  incorporated  in  the  older  model  aircraft,  e.g.,  autoland  systems;  (2)  the  aircraft  devel* 
oped  in  the  mid>1960s  were  the  midsize  and  smaller  narrow  body  aircraft  as  opposed  to  the  larger 
narrow  body  aircraft  that  constitute  the  data  points  at  the  start  of  the  curve  and  the  large  vtdde 
body  aircraft  that  constitute  the  data  points  at  the  end  of  the  curve.  Therefore,  if  all  aircraft  were 
equal,  the  left  end  of  some  curves  would  be  lower  than  the  right  end  and/or  some  curves  would 
dip  in  the  middle.  A third  factor  that  influences  titeae  data  is  the  trades  made  between  presenting 
systems  information  via  alert  lights  as  opposed  to  dlal*type  indicators.  For  example,  on  most  Boeing 
aircraft,  the  airoondltloning  and  electrical  systems  require  apprdxlmately  an  equal  number  of  func> 
tlons  presented  to  the  pilot.  Most  of  these  functions  could  be  presented  by  either  lights  or  dlal<type 
Indicators.  However,  the  electtloal  systems  have  transitioned  to  lights  and  the  alr<condltlonlng  sys* 
terns  have  retained  dlal*type  indicators  without  alert  bands  as  the  primary  method  of  presenting 
information.  Operating  limits  are  generally  downgraded,  deemed  less  critical,  if  dial-type  indicators 
are  used.  Thus  electrical  systems  would  be  more  likely  to  show  a proliferation  of  iderts  than  al^ 
conditioning  systems.  Cognizance  of  all  these  factors  and  the  magnitude  of  Influence  of  these  fac- 
tors is  required  when  interpreting  these  data. 

Examination  of  these  data  reveals  that  the  most  rapid  growth  in  the  number  of  subsystem  alerts  has 
occurred  in  the  following  systems  i 

• Electrical 

• Automatic  flight  control  system  (AFCS) 

Secondary  offenders  are  the  following  systems; 

• Hydraulics 

• Ice  and  rain  protection 

• Landing  gear  and  brakes 

• Navigation 

• Pneumatics 

Subsystems  in  which  negligible  growth  in  thi  number  of  alerts  has  occurred  are  the  following; 

• Air-conditioning 

• Altitude  alert 


• Communications 


Emargenoy  equipment 
Flight  instruments  and  air  data 


• Fuel 


• Powarplant 


Inipeotion  of  the  detailed  data  in  appendix  D indicates  that  most  of  this  growth  is  occurring  among 
the  caution  and  advisory  lights. 

2.1 .3.7  AppUcatlonB  of  Master  Caution/Master  Warning  Syatema 

Table  9 specifies  the  aircraft  that  utilize  master  caution  and  master  warning  systems,  the  location 
and  nupber  of  lights  provided  for  these  ftinotlons,  and  the  characteristics  of  usociated  aural  alerts. 
Table  10  speolflet  the  proportions  of  lights  that  will  actuate  either  the  master  caution  or  the  master 
warning. 

Analyses  of  these  data  indicated  that  master  caution  and/or  master  warning  systems  are  used  in  all 
two<man<rew  aircraft  but  in  only  a few  three-man>crew  aircraft.  The  majority  of  the  three*man> 
crew  aircraft  use  a central  block  of  lights  to  annunciate  caution  and  warning  situations.  The  737, 
DC>9,  and  DC-10  aircraft  use  a combination  of  the  central  block  of  annunciation  lights  and  master 
caution/master  warning. 

The  tyi^e  of  secondary  alerts  that  actuate  the  master  warning  alert(s)  also  varias  considerably  from 
aircraft  to  aircraft.  For  example,  on  the  DC-10  nearly  two-thirds  of  the  rod  lights  actuate  the  muter 
warning  signal  whoreu  on  the  DC-9  only  one-third  of  the  red  lights  activate  the  muter  warning.  No 
amber,  blue,  green,  white,  or  clear  lights  on  these  aircraft,  except  the  BAC-1 1 1 , activate  the  muter 
warning  signal. 

Two  amber  lights  on  the  BAC-1 1 1 activate  the  master  warning.  The  rationale  behind  this  discrep- 
ancy may  be  that  the  situation  (CSD  failure)  deserves  special  attention  and,  since  no  master  caution 
exists  in  this  aircraft,  the  master  warning  signal  was  utilized. 


The  DC-9  and  DC-10  alerting  systems  are  designed  to  augment  recognition  of  the  cabin  pressuriza- 
tion aural  alert  with  the  master  warning.  No  other  aural  alerts  activate  the  muter  warning  systems. 
No  Inconslstenciec  appeared  in  the  master  caution  system  implementations.  The  master  caution  sys- 
tems in  these  aircraft  activate  only  when  an  amber  light  on  the  overhead  panel  or  flight  engineer's 
station  illuminates. 


2.1 .3.8  Applications  of  Alert  Prioritization  and  Inhibits 

Figures  19  and  20  indicate  respectively  (1)  the  aircraft  that  have  alerting  systems  with  prioritized 
aural  alerts  and  (2)  the  aural  alert  prioritization  scheme  Incorporated  on  recent  production  models 
of  the  737.  No  aircraft  except  late  model  737s  and  a few  727s  have  an  aural  alert  prioritization  sys- 
tem. The  priority  scheme  Implemented  on  these  737s  allows  the  aural  alerts  for  FIRE  and  OVER- 


1 


CABIN  PRESSURIZATKM 


SPEED  to  occur  simultaneously;  causes  the  aural  alert  for  CABIN  ALTITUDE  and  UNSAFE 
TAKEOPF  CONFIGURATION  to  override  any  alert  listed  below  it  and  the  aural  alert  for  UNSAFE 
LANDING  GEAR  to  override  any  alert  listed  below  it,  etc.;  and  causes  the  aural  alert  for  SELCAL 
to  override  the  aural  alert  for  CREW  CALL.  The  aural  alerts  for  FIRE,  OVERSPEED,  one  item 
from  the  middle  groups,  and  one  item  from  the  right  group  can  occur  simultaneously  in  this 
priority  scheme. 

In  ARINC  577  a priority  scheme  for  all  aural  alerting  Rmctions,  currently  used  and  anticipatable  in 
the  near  fhture,  was  proposed.  Three  problems  are  immediately  noted  with  this  scheme;  (1)  too 
many  aural  alerts  are  allowed,  (2)  too  many  alerting  functions  have  equal  priority  on  the  priority  1 
level,  and  (3)  the  signlfloance  and  urgency  of  an  alert  are  somewhat  aircraft  design  dependent  and 
therefore  will  vary  from  aircraft  to  aircraft.  The  standard  for  prioritizing  the  aural  alerts  should 
provide: 

• Criteria  for  determining  whether  alert  prioritization  Is  necessary 

• Criteria  for  determining  the  priority  level  of  each  alert  if  prioritization  is  required 

• Design  guidelines  for  equipment  that  allows  aircraft  dependent  priority  assignment  of  the 

alerts  ■ ■ 


f 1.  CABIN  ALT  AND  TAKEOFF  CONFIol 


( 


* 

FIRE  AND 
OVERSPEED 


2.  LANDING  GEAR 

3.  (WAILER) 


4.  (BUZZER) 


(1.  SELCAL 
2.  CREW  CALL 


J 


BOTH  ALERTS 

CAN  OPERATE  PRIORITIZED  AS  NUMBERED 

SIMULTANEOUSLY  (NO.  1 HAS  HIGHEST  PRIORITY) 


^ 

PRIORITIZED 
AS  NUMBERED 
(NO.  1 HAS  HIGHEST 
PRIORITY) 


ALL  THREE  GROUPS  CAN  BE  ACTIVATED  SIMULTANEOUSLY 


Figun  20  737 A uni  A Itrt  Priority  Schvmt 
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Alert  inhibits  also  have  not  been  applied  extensively.  The  application  of  alert  inhibits  has  been,  . 
restricted  primarily  to  enabling  and/or  cjisabling  the  aural  aleirts  associated  with  aircraft  coiiflgura* 
tion  management,  e.g.,  flaps  extended  ahd  throttles  at  idle  but  no  landing  gear  extended, 

Not  all  alert  Inhibits  are  intentional,  i,e„  some  inhibits  result  because  the  system  with  which  they  . 
are  associated  or  a sensor  that  feeds  this  system  has  exceeded  its  region  of  valid  operation.  Ah 
example  of  this  situation  is  the  ground  proximity  warning.  Above  2500  or  5000  feet  radio  altitude, 
depending  on  type  of  equipment  used,  the  ground  proximity  alert  is  inhibited  because  ihe  radio 
altitude  signal  is  not  valid, 

The  rC‘10  is  the  only  aircraft  that  Incorporates  intentional  inhibits  of  selected  subsystem  fault 
alerts,  as  described  in  figure  21,  in  addition  to  the  traditional  conflguratiomrelated  alert  inhibits.  ' 
The  inhibits  Oh  the  DGIO  are  designed  to  eliminate  potential  disturbances  to  the  pilot  dvrlng  the 
criticalsegmentofthelandingmaneuver,l.e.,  below  100  feet.  , . 

2.2  ALERTING  FUNCTION  AND  SYSTEM  REQUIREMENTS  , ■ 

In  section  2.1 , the  good  and  bad  features  of  existing  alerting  systems  were  discerned.  Alerting  func> 
tion  end  system  requirements  were  implied  therefVom.  In  this  section,  a survey  of  applicable  stan'* 
dards,  accident  data,  operations  and  maintenance  data,  and  pilot  opinion  data  are  discuised.  An  annlo 
ysls  of  the  correlation  between  the  checklists  and  the  alerts  applied  to  each  situation  it  alto  dis* 
cussed,  Additional  alerting  system  requirements  were  derived  from  theie  analytes,  these  require* 
ments  are  combined  in  later  sections  to  derive  “preliminary"  alerting  system  Implementation  con* 
cepts.  “Preliminary"  it  emphasized  because  these  concepts  need  further  human  factors  and  opera* 
tional  testing  to  validate  their  effectiveness. 

2.2.1  APPLICABLE  STANDARDS 

Federal  Aviation  Regulations  pertinent  to  this  study  are  parts  21 , 25, 37, 91 , and  121.  Commercial 
aircraft  standards  applicable  to  this  study  are  ARINC  577,  which  was  discussed  in  section  2. 1.3. 8; 
SAE  documents  ARP  450,  ARP  571,  ARP  1068,  and  ARP  1161;  and  RTCA  document  DO-1 61  A. 
Pertinent  military  standards  and  specifications  are  MIL-STD-41 1,M1L‘STD*1472,  and  MIL*C*81774. 


AIRPLANE 

INHIBIT  CRITERIA 

ALERTING  FUNCTIONS  INHIBITED 

DC- 10 

BELOW  100  FT  RADIO 
ALTITUDE  WHEN  IN  DUAL 
LAND  MODE 

• MASTER  CAUTION  AND 
MASTER  WARNING  LIGHTS 

• AMBER  AUTOPILOT  OUT-OF- 
TRIM  AND  DISCONNECT 
LIGHTS 

• AMBER  AUTOTHROTTLE 
DISENGAGE  LIGHTS 

Figure  21  Inhibit  Philosophies  Applied  to  Subsystem  Fault  Annunciations 
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Applicable  sections  of  the  FARs  are  copied  verbatim  and  tabulated  in  appendix  A opposite  the 
alerting  ftmctions  to  which  they  apply.  In  caaes  where  the  FARs  specified  a general  requirement 
applicable  to  an  entire  system,  the  requirement  wai  listed  at  the  end  of  the  tabulatloh  for  that 
system. 

ARP  450  provides  guidelines  relative  to  the  design  of  flight  deck  visual,  audible,  and  tactile  signals; 
ARP  571  specifies  requirements  for  visual  and  aural  alerts  associated  with  nav/comm  systems,  and 
methods  of  annunciating  flight  director,  autopilot,  and  autothrottle  system  operating  modes;  ARP 
106A  specifies  design  objectives  for  all  Instrumentation  and  displays  on  the  flight  deck;  and  ARP 
1161  specifies  lighting  and  color  requirements  for  each  basic  type  of  alert.  DO*161A  specifies 
minimum  performance  standards,  including  minimum  alerting  requirements  for  ground  proximity 
warning  systems.  The  alerting  system  requiraments/guldelines  contained  in  these  standards  are 
summarized  in  tables  E-1 , -2,  -3,  *4,  ahd  >5  (appendix  E).  Hardware  requirements  are  not  included. 
In  most  bhseS  the  requirement  is  copied  verbatim;  however,  In  a few  oases,  these  statements  are 
paraphrased  to  minirpize  similar  statements. 

The  military  standards  and  speclflcations  do  not  provide  specific  requirements  relevant  to  alerting 
systems  in  commercial  transport  category  aircraft.  These  requirements  are  primarily  of  a general 
nature  end  not  directly  applicable  unless  referred  to  in  a PAR  or  ARP.  They  do  contain  substantial 
Hitman  factors  data  pertinent  to  the  design  of  alerting  systems.  The  bulk  of  these  data  are  covered 
in  the  survey  of  pertinent  human  factors  data  (section  2.4  and  ref.  2).  The  key  points  in  the  remain- 
ing guidelines  provided  by  these  standards  tire  listed  in  tables  £-6,  E-7,  and  E-8  of  appendix  E. 


2.2.2  SURVi^V  OF  PROBLEMS  WITH  CURRENT  ALERTING  SYSTEMS 

The  International  AirTransport  Association  (I  AT  A)  Technical  Committee  performed  a study  of  the 
operational  problems  its  member  airlines  had  experienced  with  aircraft  warning  systems.  They 
became  concerned  over  the  number  of  accidents  that  have  occurred  where  the  aircraft  warning  sys- 
tem was  a factor  or  may  have  contributed  significantly  to  the  chain  of  casual  events,  and  concluded 
that  an  analysis  of  these  problems  was  required  to  protect  present  fleets  and  future  aircraft  from 
similar  accidents.  Unfortunately,  no  systematic  effort  had  been  made  previously  to  collect  detailed 
data  regarding  operational  experiences  with  the  warning  systems  found  in  current  transport  aircraft. 
As  an  initial  step  In  this  direction.  lATA  surveyed  its  member  airlines  to  determine  the  current 
complement  of  cockpit  warning  systems  in  transport  aircraft,  und  to  identify  problems  experienced 
by  airline  crews  with  the  functioning  of  these  systems. 

Dr.  John  Lauber  at  NASA  Ames  Research  Center  was  commissioned  to  perform  this  survey  for 
lATA.  The  survey  covered  46  airlines  operating  the  following  aircraft; 

• DC.3.0C-8,  DC-9,  and  DC-10 

« 707, 727, 737,  and  747 

• L-188andL’1011 

• F-27  and  F-28 
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• BAC‘1 11  and  VC-10 

• SE  210,  C-160P,  YS-1 1 A,  and  HS-748 
Included  in  this  fleet  were  2614  aircraft. 

The  survey  resulted  in  identification  of  270  operational  alerting  system  problems  classified  as 
follows: 

• 146  false  positive  warnings 

• . 36  false  negative  warnings 

• 74  system  problems 

• 9 display  problems 

False  positive  warnings  are  failures  of  the  alerting  system  to  notify  the  uew  that  a hazardous  or 
abnormal  situation  demanding  their  attention  existed.  False  negative  waminp  are  nuisance  alerts, 
l.e.,  an  alert  was  given  when  no  hazardous  or  abnormal  situation  existed. 

The  system  problems  consisted  of  all  cases  wherein  the  operators  were  forced  by  regulation  to 
modify  or  voluntarily  modified  the  basic  alerting  system  to  avoid  ipeolflo  operational  problems. 

The  specific  alerting  system  features  that  constituted  each  of  these  statistics  were  not  identified  in 
Dr.  Lauber's  study  beyond  the  level  shown  in  table  1 1.  A more  detailed  analysis  of  those  data  by 
The  Boeing  Company  was  only  partially  completed  during  this  study.  No  specific  alerting  system 
requirements  evolved  from  the  partial  analysis.  Completion  of  the  detailed  analysis  is  planned  for 
the  near  future. 

2.2.3  CORRELATION  BETWEEN  CHECKLIST  AND  ALERTS 

A cursory  review  was  made  of  the  correlation  between  the  number  of  alerts  in  each  alerting  classifi- 
cation (warning,  caution,  or  advisory/status)  and  the  number  of  checklists  or  procedures  in  each  of 
the  following  procedure  categories: 

• Emergency  checklists 

• Abnormal  checklists 

• Additional  procedures 

Aural  alerts  were  not  considered  in  this  survey  because  the  alerting  oUsslflcatlon  that  each  aural 
alert  belongs  in  is  questionable. 


j)  iL  ifctf  M ■ Wi’.:  A.U.CTJ . I \ ' 
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Tabla  1 1 Alerting  System  Problems  end  Modificetions  Reported  in  I A TA  Survey  of  Airlines 


WARNING  SYSTEM  CATEGORY 


ENQINE/POWER  SYSTEMS) 

ENQINB  FAILURE  WARNING  SYSTEM 
ELECTRICAL  SYSTEM  WARNINGS 
HYDRAULIC  SYSTEM  WARNINGS 
PNEUMATIC  SYSTEM  WARNINGS 
PURL  SYSTEM  WARNINGS 


CABIN  RNVIRONMSNT  SYSTEMS) 
AIR>CONDITIONINa  WARNINGS 
PRESSURIZATION  SYSTEM  WARNINGS 
CABIN  DOOR  WARNINGS 
OXYGEN  SYSTEM  WARNINGS 


ICR  PROTECTION  SYSTEMS) 

WING  ANTI-/DR«ICR  SYSTEM  WARNINGS 

ENGINE  ANTMOR  WARNINGS 
PITOT/TATIC  HEATING  SYSTEM  WARNINGS 
OTHER  WARNINGS 


FIRS  DETECTION  AND  WARNINGS  SYSTEMS) 
ENGINE  FIRS  WARNINGS 

AUXILIARY  POWER  UNIT  FIRE  WARNINGS 
. CARGO  BAY  FIRE  WARNINGS 
WHRRLWELL  FIRS  WARNINGS 
OTHER  WARNINGS 


NUMBER  OF  NUMBER  OF 

OPERATIONAL  MODIFICATIONS 
PROBLEMS 


PRIMARY  FLIGHT  CONTROL  SYSTEMS) 

HORIZ  HABILIZIR  MOVEMENT  WARNINGS 
FLAP  AND  SLAT  SYSTEM  WARNINGS 
SPOILER  WARNINGS 

AILERON,  ELEVATOR,  RUDDER  SYS  WARNINGS 
TAKEOFF  CONFIGURATION  WARNING  SYSTEM 
LANDING  CONFIGURATION  WARNING  SYSTEM 


T»b!§  1 1 Altrting  Sytt§m  Probimt  »nd  Modlfleat/om  P§port§d  In  I AT  A Surv$y  of  AIrlIrm  ICont) 


WARNING  SYSTEM  CATBOORV 

NUMBER  OF 

OPERATIONAL 

PROBLEMS 

NUMBER  OP 
MODIFICATIONS 

SNAKING  SYSTEMS: 

SNAKE  OVERHEAT  WARNINGS 

B 

0 

ANTISKID  RAI LURE  WARNINGS 

B 

2 

REVERSE  THRUST  SYsTEM  WARNINGS 

11 

4 

PRIMARY  PLIGHT  PERPORMANCB  SYSTEMS: . 

STALL  WARNING  SYSTEM 

10 

S 

MAOH/OVBRSPBEO  WARNING  SYSTEM 

2 

0 

ALTITUDE  AND  TERRAIN  WARNING  SYSTEMS 

1 

0 

BAROMETRIC  ALTITUDE  DEVIATION 

S 

7 

RADIO  ALTITUDE  WARNING 

0 

11 

GROUND  PROXIMITY  WARNING 

0 

13 

INSTRUMENT  FAILURE  WARNING  SYSTEMS: 

PLIGHT  INSTRUMENT  COMPARATOR  WARNING , 

s 

» 

S 

PLIGHT  INSTRUMENT  FAILURE  WARNINGS 

s 

B 

NAVIGATION  INSTRUMENT  FAILURE  WARNINGS 

3 

2 

BNGINE/POWBR  INSTRUMENT  FAILURE 

3 

0 

AUTOPILOT  SYSTEM  WARNINGS 

B 

B 

The  category  ADDITIONAL  PROCEDURES  includes  all  procedural  lilted  in  the  flight  operatloni 
' manual  that  do  not  warrant  a distinct  checkllit  in  the  pilot’s  checklist  summary  booklet  but  are 
required  for  the  crew  to  remedy  aircraft  malfunctions.  Normal  checklists,  such  as  engine  start, 
landing,  secure,  etc.,  also  are  not  included  in  this  category  because  their  design  is  very  dependent  on 
the  nature  of  each  airline’s  operation. 

Table  12  specifies  the  number  of  alerts  and  checklists  or  procedures  that  fall  into  each  of  these  cute* 
goiies.  Table  13  specifies  the  ratio  of  alerts  to  checklists  and  procedures  in  each  category.  No  corre- 
lative pattern  between  the  application  of  alerts  and  the  usage  of  checklists  was  discerned  in  these 
data.  However,  the  ratio  of  warning-type  alerts  to  emergency  procedures  nearly  doubled  with  the 
advent  of  wide  body  aircraft.  This  ratio  Jumped  fVom  an  average  of  4.5  for  narrow  body  aircraft  to 
an  average  of  8,8  for  wide  body  aircraft.  The  difference  apparently  developed  because  of  require- 
ments for  additional  red  lights  and  flags  to  annunciate  the  failure  modes  of  more  complex  autopilot 
systems  incorporated  in  wide  body  aircraft.  No  emergency  checklist  is  usually  associated  with  these 
autopilot  failure  situations. 

The  correlation  between  the  type  of  checklist  and  the  type  of  alert  applied  to  each  situation  also 
was  analyzed.  The  analysis  showed  that  the  majority  of  the  checklists  do  correlate  with  the  color  of 
the  alert  llglit(s)  used  to  annunciate  the  situation.  However,  several  examples  of  noncorrelation  were 


47 


also  found.  On  the  737,  for  example,  an  abnormal  checklist  Is  associated  with  the  two  blue  lights 

that  annunciate  “generator  breaker  tripped  open."  On  the  BAC>1 1 1,  an  abnormal  checklist  is  aiio> 
dated  with  the  two  red  lights  that  annunciate  “fuel  boost  pump  low  pressure.’*  A definite  oorrela* 
tion  between  the  type  of  alert  and  the  type  of  checklist  or  procedure  applied  to  each  situation 
should  be  established.  If  an  emergency  procedure  is  required,  a waming>type  alert  should  be  used  to 
annunciate  the  situation  and  if  an  abnormal  procedure  Is  required,  a cautlon>type  alert  should  be 
used.  Advisory  and  status  lights  should  be  used  to  annunciate  situations  that  do  not  require  crew 
action  and/or  do  not  have  a speolflo  corrective  or  compensatory  procedure  associated  with  them. 
The  reverse  of  these  situations  also  should  be  applied,  e.g.,  a wamhig'-type  alert  should  not  be  used 
unless  an  emergency  procedure  is  required.  Again,  a definite  correlation  of  these  functions  needs  to 
be  established. 

2.2.4  PILOT  PREFERENCES 

A survey  of  several  pilot  organizations  resulted  in  the  following  contentus  relevant  to  the  design  of 
alerting  systems: 

• Reduce  the  number  of  alerts,  especially  the  number  of  aural  alerts. 

• Most  aural  alerts,  as  currently  designed,  are  too  loud. 

• Noncritlcal  alerts  should  be  inhibited  during  high  workload  periods,  such  as  takeoff  and  flare/ 
landing. 

• Selected  alerts  should  be  prioritized. 

• Audlo<vlsual  charaoteiistios  of  the  alerts  should  be  designed  to  instantaneously  Inform  the  pilot 
of  the  criticality  of  the  situation. 

• Direct  conelatlon  between  the  type  of  alerts  and  the  type  of  checklists  should  be  established, 
i.e.,  warning  and  emergency,  caution  and  abnormal,  etc. 

The  survey  Included  ALPA  representatives  and  chief  technical  pilots  from  most  large  airlines,  plus 
pilots  from  the  Boeing,  McDonnell  Douglas,  and  Lockheed  flight  test  organizations  and  the  Boeing 
crew  training  organization. 

The  pilots  unanimously  agree  that  the  current  number  of  aural  alerts  is  excessive  and  provides  the 
potential  for  confusion  in  the  cockpit.  Even  the  most  proflclent  pilots  questioned  whether  they,  in 
a high-stress  situation,  could  rapidly  interpret  the  significance  of  tome  of  the  lest  frequently  heard 
aural  alerts.  They  indicated  that  part  of  the  condition  it  caused  by  multifunction  applications  of 
tome  of  the  aurd  alerts,  i.e.,  designing  the  alerting  system  such  that  an  aural  alert  has  one  meaning 
during  takeoff  and  another  meaning  during  airborne  operations.  The  number  of  aural  alerts  accept* 
able  to  most  pilots  it  four,  preferably  one.  If  four  aural  alerts  are  used,  they  mutt  be  four  familiar 
alerts. 

The  Intensity  of  many  currently  used  aural  alerts  is  too  high.  Mott  aural  alerts  are  so  loud  that  nor* 
mal  crew  coordination  cannot  be  carried  on.  Their  intensity  should  be  reduced  and/or  a manual 
cutoff  capability  should  be  provided. 


Many  of  the  pilots  felt  that  the  potential  for  too  many  noneritical  alerts  exists  in  the  critical  opera- 
ting regimes  where  the  crew  cannot  afford  to  divert  their  attention  from  the  primary  flying  tasks. 
The  pilots  were  particularly  concerned  about  distracting  alerts  in  the  following  two  fliglit  regimes: 

• Takeoff  (from  slightly  below  V | through  climb  to  several  hundred  feet  altitude) 

• Landing  (from  200  feet  altitude  through  braking  and  thrust  reverse) 

An  inhibit  scheme  of  the  type  shown  in  figure  22  was  suggested.  ^ 

Inhibits  were  also  suggeited  for  the  following  purposes: 

• Minimize  nuisance  alerts  by  Inhibiting  appropriate  sections  of  the  alerting  system  in  flight 
phases  wherein  the  alert  has  no  meaning 

• Override  background  noise,  such  as  radio  chatter,  that  interferes  with  aural  alerts 

• Method  of  prioritizing  alerts 

The  application  of  inhibits  to  suppress  nuisance  alerts  and  to  prioritize  alerts  received  extensive 
pilot  support.  However,  the  concept  of  Inhibiting  radio  communications  when  an  aural  alert  is  acti> 
vated  received  numerous  objections;  the  pilots  were  wary  of  the  potential  failure  mode  wherein  the 
alerting  system  could  inhibit  their  radio  communication  capability. 

The  majority  of  these  pilots  also  fblt  that  alert  effectlvenen  could  be  Improved  by  selective  priori- 
tization. The  alerts  should  be  grouped  Into,  three  or  four  categories  wherein  each  onteguty  denotes  a 
level  of  crltloallty.  Alerts  within  each  category  should  also  be  prioritized.  The  capability  for  an  alert 
to  transition  from  one  category  to  another  as  a function  of  flight  phase  should  be  Incorporated  Into 
the  priority  system.  The  priority  of  the  alerts  will  vary  from  one  aircraft  to  another.  Accordingly, 
variable  prioritization  capability  must  be  provided. 

These  pilots  favored  prioritization ; however,  they  could  not  define  criteria  for  when  prioritization 
was  necessary.  In  a very  simple  alerting  system,  prioritization  might  not  be  required;  in  a complex 
alerting  system,  prioritization  probably  would  be  beneficial. 

A unique  audio-visual  method  of  alerting  should  be  associated  with  each  priority  category  so  as  to 
provide  an  Instantaneous  assessment  of  the  situation's  criticality.  Current  alerting  systems  do  not 
provide  this  Information,  thereby  necessitating  somewhat  drastic  methods  of  alerting  for  the  hlgiiest 
priority  alerts.  The  need  for  drastic  alerting  methods  should  be  eliminated  by  incorporating  this 
alerting  system  characteristic. 

The  pilots  expressed  concern  over  the  lack  of  correlation  between  the  type  of  alert  and  the  typo  of 
checklist  applied  to  each  situation.  I'hey  want  emergency  checklists  to  be  associated  with  warning- 
type  alerts,  abnormal  checklists  to  be  associated  with  caution-type  alerts,  and  the  additional  proce- 
dures specified  in  the  flight  operations  manual  to  be  associated  with  the  udvisory/status  alerts. 

Other  preferences  were  also  expressed  by  the  pilots;  however,  none  as  strongly  or  us  uniformly  as 
these  six  points. 


2.3  ALERTING  FUNCTION  CATEGORIES  AND  PRIORITIES 


The  requirement!  eitabllihed  in  previous  srictions  were  utilized  in  this  portion  of  the  itudy  to  (1) 
deflne  alerting  function  categories,  (2)  de^/elop  a method  for  assigning  alerting  functions  to  these 
categories,  and  (3)  develop  a method  for  prioritizing  the  alerting  functions  within  each  category. 
The  validity  of  these  definitions  and  category /priority  allocation  methods  was  tested  by  (1) 
applying  them  to  a 737  and  (2)  noting  conflicts  between  established  standards  and  the  results  of  the 
application.  Each  of  these  tasks  is  discussed  in  detail  in  the  following  sections. 

2.3.1  CATEGORY  AND  PRIORITY  DEFINITIONS 

Many  cockpit  designers  and  pilots  believe  that  current  alerting  system  problems  could  be  resolved  if 
firm  category  definitions  and  requirements  to  deslp  to  these  definitions  were  established.  Attempts 
at  establishing  firm  definitions  for  alerting  categories  were  made  long  before  the  current  study. 
Thus,  a historical  review  of  recent  developments  in  this  subject  will  be  utilized  to  develop  the 
rationale  for  the  category  definitions  and  prioritization  methods  proposed  by  this  study, 

Two  SAE  standords-ARP  4S0  and  ARP  106 8 -established  a set  of  groundrules  fur  mechanizing 
alerting  systems  encompassing  single-function  aural  alerts,  discrete  visual  alerts,  a master  caution 
system,  and  a master  warning  system.  No  alerting  categories  or  priority  schemes  were  establislied  in 
these  standards. 

During  the  era  In  which  the  aircraft  analyzed  by  this  study  were  designed,  these  ARP  standards 
often  were  not  adhered  to  because  they  had  hot  been  updated  to  reflect  latest  methods  of  imple- 
menting cockpits.  This  lack  of  operational  guidelines  resulted  in  each  alrframer  and  each  operator 
developing  and  implementing  their  own  unique  alerting  system  philosophy.  Pilot  encouragement 
finally  caused  the  SAE  S<7  Committee  to  direct  their  attention  to  updating  these  ARP  standards 
and  the  PAA  to  Initiate  this  research  program  which  is  aimed  at  developing  a universally  agreed  to 
set  of  design  objectlves/guldelines  for  alerting  systems. 

The  SAE  S-7  committee,  "Flight  Deck  and  Handling  Qualities  Standards  for  Transport  Category 
Aircraft,”  recognized  this  flaw  In  their  standards  and  requested  Inputs  from  the  airlines  and  airframe 
manufacturers.  Boeing  responded  with  two  proposed  sets  of  alerting  system  categories  plus  a list  of 
typical  alerting  functions  that  fall  within  each  category.  SAS  airlines  responded  with  a dissertation 
on  alerting  system  implementation  requirements.  Copies  of  bofh  responses  are  provided  in 
appendix  F, 

The  Boeing  response  (see  section  F,1 ) provided  a "first-out”  at  categories  that  were  oriented  toward 
Importance  of  the  alert  rather  than  the  categories  of  configuration,  flight  profile,  and  systems  as  had 
been  suggested  by  earlier  studies.  Three  basic  levels  of  importance  (categories)  were  established 
therein: 

LEVEL  1 Highest  priority  alerts  requiring  Immediate  crew  action.  It  was  recommended  that  the 
dedicated  alerting  systems  currently  used  for  these  functions  be  retained. 

LEVEL  2 Safety  of  flight  items  requiring  crew  action  but  not  immediately.  Three  sublevels  were 
defined  In  this  category.  LEVEL  2-A  consisted  primarily  of  alerts  currently  annun- 
ciated by  an  aural  alert;  LEVEL  2-B  consisted  primarily  of  system  malfunctions  and 
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aircraft  misconfigurations  with  which  the  pilot  would  not  want  to  take  off  with;  and 
LEVEL  2*C  consisted  primarily  of  aircraft  mlsconflguratlon  Items  that  should  be 
corrected  prior  to  taxiing. 

LEVEL  3 Checklist  items  that  have  only  a minor  effect  on  safety  of  flight.  Included  passenger 
service  items, 

The  requirement  for  a central  readout  device  that  identifies  the  nature  of  each  alert  and  provides  for 
graduations  In  the  boldness  of  the  alert  was  established  therein. 

In  an  attachment,  Boeing  also  proposed  a secondary  set  of  category  deflnltions  based  on  crew  recog* 
nition  end  action  requirements.  This  concept  identified  the  various  types  of  pilot  responses  that  are 
required  and  suggested  alerting  methods  that  would  provide  such  response. 

The  S AS  response  (see  section  P.  1 ) to  the  SAB  S-7  committee’s  request  for  guidelines  relevant  to 
the  operation  and  design  of  alerting  systems  was  very  similar  to  Boeing’s  but  did  not  provide  cate* 
gory  deflnltions.  Both  responses  indicated  a need  for  (1)  minimizing  the  application  of  discrete 
aural  alerts  and  (2)  an  alphanumeric  display  located  in  front  of  each  pilot  that  describes  the  exact 
nature  of  the  alerted  situation.  SAS  also  provided  a detailed  description  of  how  the  central  alpha* 
numeric  display  should  operate, 

The  FAA  simultaneously  Initiated  a series  of  studies  aimed  at  developing  standards  for  alerting  sys* 
terns  In  new  aircraft.  This  study  Is  one  of  that  series.  Baaed  on  knowledge  acquired  in  earlier  phases 
of  this  study,  two  more  detailed  alert  category  deflnltions  were  suggested  (see  section  F.2,  appendix 
F).  These  category  deflnltions  were  ampllfloatlons  of  the  alerting  levels  suggested  earlier  and  as  Inte* 
grated  by  Boeing  engineers  as  opposed  to  Boeing  pilots.  A slight  diversity  of  opinion  existed 
between  the  two  groups;  however,  the  fundamentals  of  both  concepts  were  Identical, 

A numerical  method  of  analyzing  the  criticality  of  each  alerting  situation  and  accordingly  assigning 
it  to  an  alerting  category  was  then  sought.  The  purpose  of  resorting  to  a numerical  method  was  to 
eliminate  the  subjective  aspects  of  assigning  alerting  categories.  The  relationship  between  the  pro* 
bability  of  an  alerting  situation  occurring  and  the  severity  of  its  effects,  as  established  In  BCAR 
paper  number  670,  was  used  as  a basic  for  this  numerical  method.  Figure  F*1  in  appendix  F defines 
this  relationship  as  applied  to  alerting  systems.  The  numerical  method  consisted  of  calculating  the 
probability  of  a failure  or  hazardous  situation  occurring  In  conjunction  with  (1)  the  crew  not  recog- 
nizing the  alert  and  (2)  the  situation  resulting  in  Injuries,  as  a function  of  time,  and  then  equating 
the  resulting  probability  value  to  the  levels  specified  In  flgure  F*l.  The  resulting  probability  value 
defined  the  type  of  alert  required.  Figure  F-2  defines  this  relationship. 

Several  potential  problems  were  encountered  with  the  probability  method  of  categorizing  and 
prioritizing  alerting  functions: 

• How  to  compensate  for  pilot  latency? 

• How  to  distinguish  between  major  and  catastrophic  events? 


• What  crew  workload  level  to  assume? 


• What  ’‘time  allowance  for  corrective  crew  action”  distinguishes  a warning  from  a caution? 

• Should  “crew  reliability"  be  utilized  to  design  and  certify  aircraft  aystems? 

No  Bubstuitive  answer  exists  to  the  first  four  questions.  The  answers  to  the  questions  were  very 
dependent  on  subjective  opinions.  The  lost  question  is  dominated  with  mUny  legal  implications. 
Thus,  although  the  probability  method  of  categorizing  and  prioritising  alerting  functions  is  viable, 
it  was  abandoned.  , 

Nonquantitatlve  methods  of  prioritization  and  the  deflnitloh  of  flhner  nonnumerical  categorlza* 
tion/priorltlzation  criteria  were  then  resorted  to  again.  Two  more  sets  of  category  criteria  weib  pro* 
posed.  A Boeing  engineer  proposed  the  four  category  definitions  deflne'd  in  table  P>2  (appendix  F). 
The  key  factor  In  this  proposal  was  the  definitions  of  crew  recognition  and  response  time  require* 
ments.  The  SAB  S>7  committee  simultaneously  devdoped  the  alerting  system  philosophy  an<i  cate* 
goiy  criteria  defined  In  section  F-5.  The  comments  of  Swlisair'a  chief  technical  pilot  on  the  SAE'S>7 
committee''s  alerting  system  philosophy  are  also  provided.  These  three  concepts  werr  integrated  to 
formulate  the  category  criteria  deflned  in  table  14> 

The  category  criteria  provide  auidelinei  for  cockpit  designers  to  roughly  piHoritize  the  alerting  func- 
tions. However,  they  do  not  provide  s detailed  method  for  analyzing , the  priority  of  each  aleittina. 
situation  as  a function  of  flight  phase  and  within  each  category.  An  alr-conditloning  systems  failui'e, 
for  example,  would  have  higher  prioilty  during  cruise  than  during  t^eoi'f  or  final  approach.  During 
final  approach  the  crew  is  almost  totally  odcupied' with  flying  the,  aircraft  down  the  ILS  and  liuid- 
Ing.  Annunciation  of  an  air-conditioning  failure  during  cruiae  could  result  In  b wry  uncpfnfortable 
situation  of  the  remainder  of  the  flight.  The  crew  usually  is  not  busy  during;  this  time  period  and 
would  try  to  remedy  the  air-conditioning  problem  promptly.  . 


The  impact  of  various  types  of  alerts  on  the  crew's  primary  tasks  during  each  of  the  following  flight 
phases  were  analyzed; 

• Preflight 

• 

Cruise 

• Engine  start 

• 

Descent 

• Taxi 

• 

Approach 

• Takeoff 

• 

Landing 

• Climb 

• 

Taxi  and  shutdown 

Note  that  in  a practical  situation  this  many  flight  phases  probably  would  nut  be  used.  For  this 
analysis,  excess  detail  was  felt  to  be  better  than  lack  of  detail.  Therefore,  since  the  optimum 
combination  of  flight  segments  was  not  known,  excessive  segmentation  was  used. 
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14  Criteria  for  Catagorizing  Alerting  Functions 


LEVEL 

CONDITION 

1 

EMERGENCY 

(WARNING) 

2 

ABNORMAL 

(CAUTION) 

3 

ADVISORY 

4 

NFORMATlOh 

CRITERIA 


EMERGENCY  OPERATIONAL  OR  AIRCRAFT 
SYSTEMS  CONDITIONS  WHICH  REQUIRE 

E CORRECTIVE  OR  COMPENSATORY 
^THECREW. 


ABNORMAL  OPERATIONAL  OR  AIRCRAFT 
SYSTEMS  CONDITIONS  WHICH  REQUIRE 

mmm 

CORRECTIVE  OR  COMPiWSATORY  CREW 
ACTION. 


OPERATIONAL  OR  AIRCRAFT  SYSTEMS  CONDI- 
TIONS WHICH  REQUIRE  CREW  AWARENESS  AND 
MAY  REQUIRE  CREW  ACTION, 


OPERATIONAL  OR  AIRCRAFT  SYSTEMS 
CONDITIONS  WHICH  REQUIRE  COCKPIT 
INDICATION  BUT  NOT  NECESSARILY  AS 
PART  OF  THE  INTEGRATED  WARNING 
SYSTEM. 


This  analysis  showed  that  a considerable  change  in  the  crew’s  level  of  concentration  on  their  pri- 
mary flying  tasks  occurs  midway  through  each  of  these  flight  phases.  During  takeoff  for  example, 
the  crew’s  concentration  on  the  takeoff  flying  tasks  increases  as  Vj  1$  approached,  remains  very 
high  through  rotation  and  climb  to  a safe  altitude,  and  then  decreases  agdn.  A period  of  GO/NO 
GO  uncertainty  also  exists  during  takeoff  roll  from  approximately  30  knots  prior  to  Vj  or  Vn, 
Any  noncritical  alert  during  this  period  would  disturb  the  crew  and  possibly  cause  the  pilot  to  make 
an  erroneous  GO/NO  GO  decision,  Only  the  most  critical  situations  with  which  the  crew  would  not 
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want  to  take  off  should  be  annunciated  during  this  period.  A similar  situation  exists  in  the  landing 
phase  wherein  the  crew  should  not  be  disturbed  during  the  last  200  feet  of  descent,  flare,  and 
touchdown.  Distinctions  also  exist  between  operations  above  ^nd  below  14,|Q{P0  fdet  altitude; du^  to  ; 
aircraft  pressurization  requirements.  ■;  / i , j: 

, . ■ ; ■ • - t-  - . I . 

Ground  maintenance  operations  were  reviewed  and  found  to  require  rhan^  of  the:  same  oibrtlng;^  , 
functions  that  the  flight  crews  need.  When  tiimmirtg  an  engine,  forexapiple,  the  maintenance  crew 
requires  all  the  engine  malfunction  and  Are  protection  alerts.  However,  the  eritioality  of  these  func^  I 
tions  may  not  be  at  high  in  maintenance  operations  as  in  flight  operations.  7 ' 

Based  on  these  types  of  analyses,  the  fligHt  phases  or  flight^phaie  segments  defined  in  table 
aelected  for  further  prioritizing  the  alerting  functions.  The  two  problems  that  still  reniaiiied  ^ere 
(1)  hdW  to  prioritize  compound  malfunctions  and,  (2)  how  to  prioritize  the  alerting  functiorii  within, 
each  category.  ''  ■ ' , '7  ^ 

The  compound  malfunction  situation  is  very  aircraft  and  type  of  system  dependent,  Thie  f^ 
for  example,  of  one  hydraulic  system  does  not  pose  as  critical  a situation  oti  thB  ;747  a»,pn  the  f37  , 
becauss*  the  747  has  fony  parallel  hydraulic  systems,  wliereas  the  737  has  only  ty/o  paraliei  systems, . 

Is  the  failure  of  two  hydraulic  systems  or  three,  hydraulic  systems  on  the  747  equlv^ent  to  the 
failure  of  a single  system  on  the  737?  Figure  23  lUustrates  the  general  type  .of  Ipgdc  thiit  had  tp  be 
applleii  to  prioritize  these  aler|irig  situations.  .The  lolpC' /in  this  diagram  was  developed  primarily 
for  nonSylonic  systems.  The  general  appllcatlpn  of  this  ipglc  to  all  systems,  however,  is  not  feasible. 

Ih  utterfipts  to  develop  arid  verify  pribiitlzatlon  logic  of  this  type,  it  was  determined  that  parallel 
sets  of  logic  were  required-bne  Set  of  logic  for  each  type  of  iysi;em  malfunction  and,  operational 
situation.  The  development  of  these  detailed  prioritization  logic  sets  required  more  expertise  on  the 
compound  effects  and  safety  implications  of  each  alerting  situation  than  was  available  to  the  group 
performing  this,  study.  .An  analysis  of  the  effects  and  safety  implications  of  each  compound  mai> 
function  war  required  for  each  basic  type  of  aircraft  in  order  to  assign  relative  priorities  to  these 
alerting  situations, 

Similar  situations  arise  with  regard  to  compound  malfunctions  involving  various  types  of  systems. 

For  example,  what  should  the  priority  be  ot' an  alert  annunciating  a pneUrnatlc  systrini  failure  after 
an  i*ir*condltloiilng  system  failure  has  already  occurred?  Should  it  be  the  same  priority  as,  or  a 
higher  priority  than,  a pneumatic  system  failure  without  any  previous  air-conditioning  failures? 
Another  example,  how  should  the  relative  priorities  of  an  autopilot  channel  failure  as  compared  to 
an  electrical  generator  be  established?  The  electrical  generator  failure  would  liave  broader  effects  on 
operation  of  other  aircraft  systenis,  including  the  autopilot,  but  the  autopilot  could  have  an  imme- 
diate effect  on  controlling  the  fllghtpath  of  the  aircraft.  Which  is  more  important? 

Sonte  pilots  argue  tliat  compound  effects  should  not  be  considered  in  prioritizing  the  alerts.  The 
priority  assigned  to  the  basic  alerting  function  should  be  used  fur  all  situations,  Irrespective  of  com- 
pound effects,  and  the  aosessment  of  compound  effects  should  be  left  up  to  the  pilots.  Other  pilots 
want  an  elaborate  alerting  system  that  makes  all  the  compound  ef  fect  Judgments  for  them.  The 
analyses  performed  In  this  study  Indicate  that  the  elaborate  versions  of  the  system  would; 

• Require  substantial  computation  capability 

• Require  software  that  is  very  sensitive  to  aircraft  configuration  modifications  and  frequent 
modlflcatlons  of  this  software  to  keep  it  current  (as  with  the  checklists) 
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• Milke  the  logic  unique  to  each  aircraft-differences  could  exist  between  aircraft  of  the  same 
type,  even  within  an  airline’s  fleet 

The  elaborate  venlon  of  the  system  could  become  an  expensive  maintenance  item  for  the  airlines. 
For  these  reasons,  therefore,  It  Is  recommended  that  alert  prioritization  as  a function  of  compound 
effects  be  minimized. 

The  prioritization  of  alerts  within  each  category  was  also  studied.  An  example  of  such  a case  is 
prioritization  of  the  stall  wamlng  relative  to  the  ground  proximity  warning.  Both  alerts  will  prob* 
ably  be  LEVEL  1 alerts  as  deflned  in  table  14,  If  a ground  proximity  warning  occurs  and  then  a 
stall  warning  occun  while  the  pilot  la  pulling  up,  should  the  stall  warning  take  precedence,  should 
the  ground  proximity  warning  take  precedence,  or  should  both  be  allowed  to  occur  simultane- 
ously? Ideally,  a numerical  rating  method  would  be  utilized  to  prioritize  these  alerting  functions 
within  each  category;  however,  none  was  conceived.  The  ranking  of  these  alerts  is  very  subjective; 
pilot  opinion  on  these  rankinp  currently  is  diverse.  Much  of  the  diversity  results  from  differences  in 
the  derigns  of  the  aircraft.  However,  better  agreement  exists  among  the  high  priority  alerting  func- 
tions tlian  on  the  middle  or  low  priority  alerts.  Thus  it  is  recommended  that  priority  sequence 
guidelines  be  established  only  for  the  LEVEL  1 and  possibly  LEVEL  2 alerts,  and  that  the  prioriti- 
zation of  LEVEL  3 and  LEVEL  4 alerts  to  be  left  up  to  the  airframe  manuf'aoturera  and  operators, 

2.3.2  APPUCATION  OF  CATEOORY/PRIORITY  RATIONALE 

Category  criteria  for  defining  alert  priorities  were  specified  in  table  14,  The  flight  phases  and  flight 
phue  segments  for  which  alert  priorities  have  to  be  specified  were  defined  in  table  15.  Considera- 
tion of  compound  effects  was  deemed  unnecessary.  Standardization  on  alert  priorities  within  the 
categories  was  deemed  feasible  only  within  the  two  highest  priority  alert  categories.  The  low  pri- 
ority alerts  are  too  dependent  on  aircraft  design  differences  to  allow  standardization.  These  alert 
prioritization  philosophies  were  applied  to  a 737  to  validate  the  concepts  and  to  identify  conflicts 
with  existing  standards. 

Each  alerting  function  specified  in  appendix  A for  the  737  was  assigned  a priority  as  a function  of 
flight  phase  (see  appendix  G).  The  alerting  functions  within  LEVELS  1 and  2 were  then  prioritized 
as  shown  in  table  16.  Note  that  prioritization  of  the  LEVEL  3 and  LEVEL4  alerts  was  not  attempted 
because  these  alerts  are  too  aircraft  design  dependent.  Significant  diffbrences  in  the  alert  priorities 
will  exist  in  these  two  categories  between  aircraft  models. 

2.4  HUMAN  FACTORS  DESIGN  GUIDELINES 

In  section  2.1 , current  alerting  methods  were  reviewed  and  the  good  and  bad  features  of  each  design 
were  discussed.  In  section  2.2,  existing  standards,  operational  data,  and  pilot  preferences  were  ana- 
lyzed to  obtain  a composite  listing  of  requirements  that  apply  to  existing  alerting  systems  and  to 
develop  an  alternate  set  of  requirements  that  should  be  applied  to  future  alerting  systems.  In  section 
2.3,  alerting  function  category  criteria  and  a set  of  alert  priorities  matching  these  criteria  were  estab- 
lished. The  problem  that  then  remained  was  "what  human  factors  guidelines  should  be  applied 
when  Implementing  the  results  of  these  analyses?"  A survey  of  the  human  factors  data  applicable  to 
alerting  systems  was  performed  to  develop  these  missing  guidelines.  The  derivation  of  these  guide- 
lines and  the  types  of  data  required  to  complete  and  validate  these  guidelines  are  discussed  in  the 
following  sections. 
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2.4.1  LITERATURE  REVIEW  AND  RECOMMENDED  GUIDELINES 


The  litenture  review  wu  itructured  to  Inveitigate  how  piloti  respond  to  alerting  ilgnali.  The 
current  variety  of  signaling  devices  utilized  to  transfer  Information  In  the  cockpit  have  begun  to 
saturate  the  pilot  and  decreased  his  efficiency  to  the  point  where  prioritization  of  the  information 
presented  may  be  necessary.  The  basis  for  any  prioritization  scheme  must  be  the  time  in  which  a 
pilot  must  react  to  the  situation.  Signaling  devices  must  be  selected  to  ensure  a response  time  that  is 
commensurate  with  the  priority  of  the  signal  and  must  convey  enough  information  to  maximize  the 
probability  of  the  correct  response  within  a reasonable  time.  Since  current  aircraft  design  practices 
for  alerting  systems  have  evolved  with  some  nonoptimum  characteristics  due  to  cost,  implementa* 
tion  difftculties,  or  personal  biues  of  various  chief  pilots  and  designers,  the  literature  review  was 
performed  with  a ground  rule  to  "Ignore  current  aircraft  design  practices." 

The  literature  review  was  conducted  with  the  following  specific  objectives: 

• Investigate  the  type  of  signals  that  can  be  used  to  transfer  information  in  a cockpit 
environment. 

• Determine  the  facton  that  affect  the  detection  of  these  cignals. 

• Determine  the  factors  that  affect  the  time  flrom  signal  detection  to  a correct  action. 

• Formulate  guidelines  for  maximizing  the  effectiveness  of  signaling  systems. 

• Evaluate  the  data  with  respect  to  its  relevance  and  applicability  and  recommend  research  pro- 
grams to  augment  the  existing  data  and  refine  the  guidelines. 

The  review  was  divided  into  two  primary  areas  of  concern: 

e Factors  that  affect  detection  of  signals 

e Factors  that  affect  time  from  detection  to  coneot  response 

The  literature  review  and  guidelines  are  quite  lengthy  and  will  therefore  only  be  presented  in  a con- 
densed form  in  this  section;  the  full  text  Is  contained  in  reference  2. 

2.4.1 .1  Factors  That  Affect  Detection  of  Signals 

A summary  of  the  factors  that  affect  visual,  auditory,  and  tactile  signals  is  presented  in  table  17. 
These  data  indicate  that  the  detection  of  visual  signals  is  affected  by  the  signal  location,  size,  bright- 
ness, color,  and  steady  state  or  intermittent  nature. 

The  location  of  a visual  sipal  relative  to  the  pilot's  centerline  of  vision  has  a signiflcant  effect  on 
not  only  the  speed  with  which  a signal  is  detected,  but  also  the  probability  that  it  will  be  seen  at  all. 

Evidence  indicates  that  the  likelihood  of  detecting  a small  visual  signal  decreases  from  83%  for  those 
alerts  located  directly  in  the  center  of  the  pilot’s  visual  field  to  35%  for  those  signals  located  in  the 
30°  to  40°  deviation  zone. 


Table  17  Stimuli  Response  Sensitivities  and  Applications  Guidelines  Summary 


STIMULUS  CHARACTSmSTIC 


RSNSmviTVMPPLICATION  QUIDBLINS 


VISUAL  LOCATION 


■niQHTNBSS 


PLASHING  VS 
8TIADY 

COLOR 


PROM  LING  OF  SIGHT  (MAXI 
I**  VISUAL  ANOLB 

SRIGHTBR  THAN  BACKGROUND  BUT  NOT  SO  BRIGHT 
AS  TO  BLIND  OBSBRVBR 

PLASHING  AGAINST  STSADY  BACKGROUND  MOr 
BPPBCTIVB 


FASTEST-* 

RBD  GRBIN 
1.SSBC  2.0  SBC 


" SLOWBST 

YBLLOW  WHITS 

2.3  SBC  2.7  BBC-^DBTBCTION  TIMBB 


AUDITORY  PGRCBIVBD  LuUDNBSS  MAXIMIZBO  IN  2000  TO  4000  Hi  RANGG 


PRBQUBNCY 

DBAFNBSS 

SOUND  LfiVBL 


LOCATION 


INTBRMITTBNT  VS 
STBADY 

MB88AGG  GONTBNT 


USB  TWO  OR  MORB  PNBQUBNCIE8  IN  2b0 
TO  4000  Hi  RANGE  WITHIN  BACH  SIGNAL 

16  dS  ABOVE  MASKING  THRESHOLD  OR 
HALFWAY  BBTWBIN  MASKING  THRESHOLD 
AND  IIOdS.WHICHBVIR  IS  LESS 

MONAURAL  SIGNALS  SHOULD  SB  PRBSBNrBDTO  DOMINANT  EAR 

WARNING  SIGNAL  SOURCE  SHOULD  BE  BBPARATBD 
AT  LEAST  BOO  ,>noM  THB  SOURCH  OP  INTERFERING 
NOISE  OR  MESSAGBB 

INTERMITTENT  MORB  LIKBLY  TO  SB  DITBCTBD 


PRBCBDE  MB88AGB8  BY  AN  ATTENTION  GBTTBR  TO  WHICH  THB 
PILOT  IS  MORB  THAN  NORMAL  SENSITIVE 


INTERMITTENT  VS 
STEADY 

VIBRATION 

AREA  OF  BODY 


INTENSITY 


TOUCH  SENSE  IB  ACTIVATED  ONLY  BY  SKIN  DE« 
FORMATION 

MAXIMUM  SENSITIVITY  BETWEEN  200  AND  300  Hi 

FINGERS  MOST  SENSITIVE 
BUTTOCKS  LEAST  SENSITIVE 

60  TO  100  MICRONS 


AS 


The  military  standards  and  design  guides  define  the  pilot’s  centerline  of  sight  as  a vector  emanating 
from  the  pilot’s  eye,  extending  straight  forward  and  angled  10°  below  horizontal.  The  commercial 
airframe  manufacturers  have  several  detlnitions  of  the  centerline  of  sight,  all  of  which  differ  from 
the  military  definition.  The  most  consistently  used  commercial  aircraft  definition  of  centerline  of 
sight  appears  to  be  the  line  between  the  pilot’s  eye  reference  point  and  the  center  of  his  ADI,  The 
definitions  of  primary  and  secondary  field  of  view  also  vary.  The  military  defines  primary  field  of 
view  at  the  region  within  a 1 5°  cone  around  the  centerline  of  vision  and  the  secondary  field  of  view 
at  the  region  between  a 1 5°  and  a 30°  cone  around  the  centerline  of  vision.  Commercial  aircraft 
manufacturers  generally  define  primary  field  of  view  as  a binocular-shaped  area  covering  most  of  the 
pilot’s  primary  Instrument  panel  (containing  ADI,  HSI,  airspeed,  and  dtltude  indicators)  and  secon- 
dary Held  of  view  as  a binocular-shaped  area  covering  most  of  the  pilot’s  front  panel  (including 
engine  instrument  and  autopilot  mode  select  panels).  Considerable  variations  of  these  definitions 
were  found  in  the  commercial  aircraft  industry.  The  human  factors  data  indicate  that  most  of  these 
definitions  are  reasonable  with  respect  to  location  of  alerting  signals.  However,  until  fltrther  testing 
can  be  performed  to  better  define  these  criteria,  the  following  combination  of  military  and  oomme^ 
cial  criteria  for  location  of  visual  alerting  signals  is  recommended; 

• High  priority  alerts  should  be  located  no  more  than  15°  from  the  pilot’s  centerline  of  vision, 

• Caution  signals  should  be  located  no  more  than  30°  from  the  pilot’s  oentorllne  of  vision. 

To  summarize,  the  higher  priority  a visual  signal  is,  the  closer  it  should  be  located  to  the  center  of 
the  pilot's  visual  Held.  An  Illustration  of  these  guidelines  is  provided  in  figure  24. 

The  size  of  the  visual  signal  also  has  a strong  effect  on  its  detection  time.  Figure  25  presents  the 
effect  of  increasing  the  lighted  area  of  a border-lit  sipal.  A moderate  Improvement  in  response  time 
is  obtained  when  the  border  width  was  Increased  from  0,26°  visual  angle  (1  square  degree  of  surface 
area)  to  0.64°  (2.74  square  degrees).  However,  there  it  estentlally  no  improvement  beyond  this 
point.  Other  research  efforts  have  also  found  this  signal  size  of  1°  visual  angle  produces  the  quickest 
response  times.  Therefore  it  is  recommended  that:  (1)  high-priority  signals  be  no  lets  than  1°  visual 
angle  in  size,  and  (2)  secondary  signals  be  no  lest  than  0.5°  visual  angle  in  size. 

The  higher  the  priority  of  a signal,  the  brighter  it  should  be  as  long  as  it  it  not  so  bright  that  it 
blinds  the  pilot.  High-priority  signals  should  be  at  least  twice  as  bright  as  other  displays  in  the  same 
area. 

Even  thouglt  the  criticality  of  the  signal  dictates  the  intensity  of  any  signal,  the  range  of  intensities 
is  dictated  by  the  detection  threshold  on  one  end  and  the  disruption  of  normal  activity  on  the 
other.  Military  standards  require  rear-lighted  signals  to  have  a brightness  capability  of  150  ft-L 
(dimmable)  for  high-priority  signals  and  a 15  ft-L  tdimmable)  for  secondary  signals.  These  standards 
are  consistent  with  research  findings.  The  resulting  recommendations  were; 

• Highest  priority  signals  should  be  at  least  twice  as  bright  as  secondary  displays. 

• Lower  priority  signals  should  be  at  least  10%  brighter  than  lesser  priority  displays  in  the  same 
vicinity. 

• Highest  priority  signals  should  have  a brightness  capability  of  at  least  ISO  ft-L  and  secondary 
signals  15  ft-L. 


M 


-ui-iltlll 


..lirt'ii.'i.  iL  j.s.-.f:  ua-H  'ftUu 


1 


The  detectability  of  flashing  and  steady  lights  is  dependent  upon  whether  the  other  possible  distrac> 
ting  signals  are  flashing  or  steady,  The  experimental  evidence  showed  that  flashing  alert  lights  ere 
detected  30%  faster  than  steady  alert  lights  when  combined  with  steady  dlstracton,  but  24%  slower 
than  steady  lights  when  combined  with  flashing  distractors.  However,  the  fastest  mean  detection 
times  are  obtained  by  flashing  alerts  with  steady  distracting  signals,  llierefore  it  is  recommended 
that  high  priority  alerts  should  flash  and  have  the  capability  of  making  other  lights  that  may  be 
activated  go  to  a steady  state, 

The  effects  of  color  are  small  as  shown  in  table  17.  In  most  situations,  the  0.9  sec  (maximum  found 
in  the  data;  in  most  of  the  data,  the  difference  Is  closer  to  0.1  sec)  in  detection  time  between  the 
most  efficient  and  least  efficient  colors  probably  has  no  practloat  significance.  It  was,  therefore, 
recommended  to  continue  using  the  existing  ground  rules  for  colors  of  alerting  ll^ts: 

• Red  for  warning  annunciations  indicating  a hazard  that  requires  immediate  action 

• Amber  for  caution  annunciations  indicating  the  possible  need  for  future  corrective  action 

• Green  for  SAFE  annunciations 

Any  other  color  for  lights  not  described  above  is  acceptable  provided  the  color  differs  sufficiently 
from  the  colors  described  above  to  avoid  possible  confusion. 

The  auditory  stimuli  data  indicate  that  the  primary  factors  affecting  detection  of  such  signals  are: 

• Frequency 

• Loudness 

• Location 

f Intermlttency 

• Message  content 

Young  humans  can  detect  sounds  with  frequencies  ranging  from  20  Hz  to  about  20,000  Hz,  Fre- 
quency has  a strong  effect  on  perceived  loudness.  Midfrequency  (2000-4000  Hz)  sounds  tend  to 
sound  louder  than  either  high-  or  low-frequency  sounds  of  the  same  energy  level.  Two  additional 
frequency-related  factors  that  Impact  the  detection  of  aural  signals  are  aging  which  causes  a pro- 
gressive loss  of  hearing  in  the  higher  frequencies,  and  ear  Injuries,  which  ocoRslonally  produce  unsen- 
sitivities or  denfness  to  particular  frequencies.  For  these  reasons  it  is  recommended  that  each  aural 
signal  be  composed  of  two  or  more  widely  spaced  frequencies  in  the  range  from  2504Q00  Hz. 

The  guidelines  recommended  for  determining  the  loudness  required  of  aural  alerting  signals  were 
expressed  as  delta  loudness  required  above  the  masked  threshold  created  by  ambient  noise.  It  is 
Important  to  distinguish  between  this  threshold  and  ambient  noise.  “Threshold”  is  defined  as  the 
loudness  level  required  of  an  aural  alerting  signal  to  assure  50%  detection.  This  factor  usually  has 
a value  that  is  less  than  the  overall  ambient  noise  level.  Methods  of  calculating  this  threshold  value 
are  presented  in  reference  2.  Wllh  cognizance  of  these  factors,  the  following  guidelines  for  present- 
ing high  priority  aural  alerting  signals  were  derived; 


1 5 dB  above  threshold 


• Halfway  b(stwe»n  threihdld  and  1 10  dB 

Ho^aver,  these  guidelines  may  in  some. cases  conflict  with  the  pilot  criticism  that  most  aural  alerts 
as  currently  implemonted  are  loo  loud.  Care  must  be  taken  when  applying  these  guidelines  to  the 
actual  cockpit  environment  because  It  Is  possible  to  introduce  sound  levels  that  are  intolerable  to 
the  pilot.  The  range  of  sigral  intensity  by  necessity  must  be  limited  on  one  end  by  the  auditory 
threshold  and  at  the  other  end  by  the  onset  of  pain  (110  dB).  The  intensity/exposure  time  Inter- 
action, which  imposes  limits  after  which  there  is  a high  risk  of  damage  for  unprotected  ears  (figure 
26)  must  also  be  considered.  Thus,  until  data  that  resolves  this  conflict  are  obtained,  it  is  recom- 
mended thilt  the  following  guideline  be  used: 


SIGNAL  LOUDNESS 


THJIESHOLD  + 15  dB 
OR 

THRESHOLD  + 1/2(110  dB-THRESHOLD), 


WHICHEVER  IS  LESS 


NOTI:  PAIN  LIMIT  (•OnUNPnOTICTIO  I Amiia SHOWN  AT  mea.  WHIN  IAN  PNOTICTOna 

ANBUSIO,  SOUND  PNiaaUNI  LIVIL  IN  SOUND  PIILD  CAN  IXCIID  THEBt  CNITINIA 
IV  AMOUNT  OP  ATTENUATION  PNOVIOlO  BV  PROTICTONS.  SODV.EXPOBUNB  LIMIT 
AT  IMdS  IS  POINT  AT  WHICH  POTENTIALLY  DANOENOUE  NON-AUOITOR  V SPPECTI 
OCr-'X  THIS  LEVEL  SHOULD  NOT  BE  IXCECDED  IN  ANY  CASE  IILDRED  IT  AL‘  196BI. 


Figun  26  Dgmsy  RMt  Crtfria  for  V§rfout  Bxpoiurt  Tfnm  Up  to  8 Hourt 
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The  experimental  data  also  indicate  that  aural  signals,  which  are  perceived  as  coining  from  a different 
location  than  the  background  loundi,  are  more  likely  to  be  detected  than  ligRili  that  cannot  be 
separated  in  location  from  background  sounds.  It  was  found,  as  shown  in  figure  27,  that  detect* 
ability  of  an  aural  signal  can  he  Improved  40%  by  going  from  0°  to  90°  directional  aephration 
between  the  sources  of  background  noise  and  the  aural  alerting  signals.  It  was  also  shown  that  if 
earphones  are  used,  a substantial  improvement  in  detectability  pan  be  obtained  by  presenting  all 
aural  alerting  signals  only  to  the  pilot's  dominant  ear.  The  resulting  recommendations  from  this  area 
of  study  were: 

• Present  aural  warning  signals  dlchotically  to  the  pilot's  dominant  ear.  (In  dlchotic  listening  the 
alert  li  presented  by  an  earphone  to  one  ear.  and  interfering  noise  or  messages  are  restricted  to 
the  other  ear.) 

• If  dichotlc  separation  is  not  poMible,  locate  the  source  of  aural  alerting  signals  90°  fi'om  the 
source  of  interfering  noise  or  messages. 

Another  factor  that  must  be  noted  is  that  the  human  auditory  system  rapidly  becomes  used  to 
hearing  steadynitate  signals.  Therefore,  it  is  recommended  that  intermittent  sound  signals  should  be 
utilized  for  aural  alerting. 


FIgun  27  Effect  of  Aural  Aiming  Signal  Souret  Location 


The  detection  of  a sound  signal  is  often  affected  by  the  content  of  the  signal,  For  example,  a per- 
son’s name  is  usually  more  attention  attracting  than  any  other  auditory  message  of  the  same  vol- 
ume. Experimental  data  indicate  that  having  a person’s  name  precede  an  auditory  message  appears 
to  have  about  the  same  effect  on  detection  as  Increasing  the  loudness  of  the  message  by  3 dB.  Thus, 
it  is  recommended  that  aural  alerting  messages  can  be  preceded  by  an  identifier  to  which  the  pilot  Is 
more  than  normally  sensltlvlte,  e,g„  the  pilot’s  name  or  aircraft  Identification. 

Tactile  Slgndls  cdnslst  of  such  things  as  vibration,  shock,  heat,  etc.  The  data  Indicate  that  the  pri- 
mary factors  affecting  the  effectiveness  of  a tactile  type  signal  are  intemittency,  Intensity,  and  part 
of  body  stimulated. 

Continuous  skin  movement  is  required  to  stimulate  the  touch  or  pressure  sense.  It  has  been  shown 
that  this  sense  is  maximally  sensitive  on  the  fingers  at  vibrations  in  the  200-  to  3000-Ha  range.  The 
intensity  of  these  s|j|pials  has  nominally  been  given  the  range  of  50-microns.  This  range  is  directly 
related  to  the  area  of  the  body  receiving  the  signal.  The  sensitivity  to  touch  varies  widely  from  one 
section  of  the  body  to  another;  the  fingers  are  the  most  sensitive  and  the  buttocks  the  least.  There- 
fore, the  amplitude  of  any  tactile  signal  must  be  calibrated  to  produce  a sensation  oh  the  body  area 
where  it  is  placed. 

Other  types  of  tactile  stimuli  should  be  used  veiy  cautiously.  They  are  either  dangerous  to  use, 
cause  excessive  startle  or  adverse  reactions,  or  otherwise  inhibit  normal  pilot  actions.  Tlie  magnitude 
of  an  electrical  shock,  for  example.  Is  very  difficult  to  control  because  of  Its  sensitivity  to  perspira- 
tion. Electrical  shock  also  frequently  startles  the  subject  to  the  extent  that  he  is  momentarily 
incapacitated  and  then  reacts  excessively  in  an  Inappropriate  manner.  Other  tactile  devices  such  as 
seatbelt  Jerkers  or  seat  Jabbers  tend  to  Inhibit  normal  pilot  movement.  These  problems  are  typical  of 
difficulties  that  are  encountered  with  most  tactile  stimuli. 

Environmental  factors  such  as  distractors,  existing  cognitive  workload,  and  vigilance  also  have  a 
significant  effect  on  pilot  response  to  a signal.  Any  kind  of  distracting  stimuli  (visual,  auditory,  or 
tactile)  will  have  an  adverse  effect  on  the  detection  of  alerting  signals.  In  the  presence  of  visual  and/ 
or  auditory  distractors,  the  effectiveness  of  types  of  warning  signals  from  best  to  poorest  are  tactile, 
auditory,  and  visual.  However,  tactile  distractors  have  a more  disruptive  effect  than  visual  or  audi- 
tory distractors  on  other  activities. 

Vigilance  and  cognitive  workloads  are  a function  of  the  rate  at  which  information  is  presented. 
There  is  a limited  range  of  rates  at  which  human  beings  process  information  effectively.  When  infor- 
mation is  presented  at  rates  slower  than  the  optimum  rate,  an  Individual  will  tend  not  to  monitor 
the  information  sources  effectively  and  will  miss  a substantial  proportion  of  the  information  being 
presented.  Information  rates  above  the  optimum  range  produce  cognitive  overload.  Individuals 
under  a cognitive  overload  will  miss  part  of  the  information  being  presented  and  will  process  otlier 
parts  of  the  infonnation  incorrectly.  General  characteristics  such  us  these  were  found  in  the  litera- 
ture. However,  consistent  quantitative  definitions  of  the  minimum  information  rate  necessary  to 
maintain  vigilance  and  the  maximum  information  rate  allowed  so  as  not  to  cause  cognitive  overload 
were  not  found. 

A tabulation  was  made  of  response  times  obtained  In  the  experiments  covered  by  the  literature  and 
the  conditions  under  which  these  times  were  obtained.  Tills  tabulation  was  used  to  detect  trends 
and  unique  characteristics  of  combinations  of  stimuli.  These  data  are  presented  in  table  18.  From,  an 
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T(^h  18  Typlc§l  Stimuli  H$$pon$»  TinM 


NATURE  OF  STIMULI 

RESFONSETIME,  SEC 

TEST  CONDITIONS 

VISUAL 

12.12 

TRACKING  TASK;  NO  IMFAQT  ON 

VISUAL  AND  SUZ2ER 

4.02 

CONCURRENT  TRACKING  TASK 

VISUAL  AND  VOICE 

2.40 

FERFORMANCE 

VISUAL  AND  SUZ2BR 

4.87 

TRACKING  TASK;  BETTER  TRACKIliO 

VISUAL  AND  VOICE 

1.94 

WITH  VOICE  WARNING 

VISUAL  AND  TONI 

9.S8 

VISUAL  AND  VOICE 

7.SB 

VISUAL  AND  BUZZER 

2.63 

VISUAL  AND  VOICE 

1.62 

VISUAL 

126.27 

HIQH'SPEED  LOW'LEVBL  MILITARY 

VOICE 

3.03 

FLIGHT  TESTS 

VISUAL 

44.06 

VISUAL  CONSISTED  OF  ANALOG 

VOICE 

2.93 

INSTRUMENTS  AND  LIGHTS  IN 
AN  F>100  AIRCRAFT 

VISUAL  (STBAOV) 

2.0 

HUMAN  FACTORS  TEST  IN  A STERILE 

VISUAL  (FLASHINO) 

1.3 

LABORATORY  ENVIRONMENT 

AUDITORY 

2.2 

SIMULATION  OF  A TYPICAL  COCKPIT 

VISUAL 

2.7 

ENVIRONMENT 

VOICE 

1.94 

BUZZER 

2.67 

TONE 

9.36 

P>1 1 1 SIMULATOR;  EACH  ALERT  CON- 

VOICE 

7.89 

8I8TED  OF  A MASTER  CAUTION 
LIGHT,  AN  ALERT  IDENTIFICATION 
LIGHT,  AND  AN  AURAL  ANNUNCIA- 
TION OF  THE  TYPE  DESCRIBED  TO 
THE  LEFT 

VISUAL 

0.494 

AUDITORY 

0.463 

NO  LOADING 

TACTILE 

0.381 

VISUAL 

SLOWEST 

AUDITORY 

NO  LOADING  EXCEPT  VISUAL  AND 

TACTILE 

FASTEST 



AUDITORY  DISTRACTORS 
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overview  of  these  clata,  Jt  is  obvious  that  tactile  signals  produce  the  fastest  response  in  the  non- 
loaded  situation  and  a combination  of  visual  and  aural  signals  produce  the  fastest  response  When 
used  with  idtcraft-related  tasks.  Of  the  combination  visual  and  aural  stimuli,  the  visual/voice  com- 
bination appears  to  be  more  effective  than  the  visual/tone  combination,  Voice  stimuli  consistently 
produce  a faster  response  than  visual  stimuli.  Based  on  these  data,  these  types  of  alerting  stimuli 
and  combinations  thereof  might  be  ranked  as  shown  in  figures  28  and  29. 


IPPECTIVE 

VOICE  1 

TONES,  gUZZERS.  BBLUE,  AND  CUACKBRS  I 

LIGHTIAN0LEQIN08 
ANALOG  DI8RLAYE 


VIBRATIONS 

PRBSBURE 

SHOCK  ^ ^ 

INBPPECTIVE 

F/fun  28  Altrt'Typt  EfHctIvtnm 


(BIIT) 

10  r VISUAL  AND  VOICE 

B - VISUAL  AND  BUZZER  OR  TONE 
- VOICE 


h VISUAL 


OL- 

(POORE8T) 


Ftgun  29  Mativt  Ef^tlmtm  ofAco$ptabl»  Typti  ofAtprt  Stimuli 
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2.4. 1.2  Time  From  Detection  to  Response 

The  foregoing  discussion  has  dealt  mainly  with  the  detection  of  signals.  However,  if  an  alerting  sig- 
nal is  to  be  effective,  the  pilot  mutt  both  detect  the  alert  and  make  the  appropriate  response,  There- 
fore, a warning  signal  must  convey  Information  about  the  nature  of  the  problem  and/or  tell  the 
pilot  how  to  respond.  There  will  dways  be  a finite  Interval  of  time  between  the  detection  of  the 
alert  and  the  completion  of  the  response.  The  length  of  this  interval  is  primarily  dependent  on 
signal-related  factors,  environmental  factors,  and  previous  experience. 

The  mslor  signal-related  factors  that  affect  the  time  from  detection  to  response  are  number  of  steps 
in  the  data  collection  and  length  of  the  signal. 

A pilot  cannot  make  a correct  response  to  an  alerting  signal  until  he  has  deduced  the  proper  res- 
ponse. If  the  Initial  alerting  signal  contains  adequate  information,  the  pilot  may  initiate  action  at 
once.  However,  if  the  initial  alert  does  not  give  adequate  information  of  the  nature  of  the  problem, 
then  the  pilot  must  obtain  more  information  before  he  can  take  corrective  action.  Thus,  the  extra 
steps  in  the  data  acquisition  will  increase  the  time  to  the  correct  response. 

Two  experiments  were  reviewed  to  obtain  a quantified  estimate  of  this  effect.  In  both  experiments, 
alert  detection  and  identification  times  were  measured  for  visual,  buzzer,  and  voice  alerts  and  com- 
binations thereof.  The  visual  and  voice  alerts  provided  enough  Information  so  the  subjects  did  not 
have  to  scan  the  other  displays  to  identify  the  nature  of  the  alert,  i.e.,  a single-step  process.  The 
buzzer  alerts  required  the  subject  to  scan  one  or  more  visual  displays  in  order  to  identify  the  cases, 
the  voice  alerts  resulted  In  the  shortest  identification  times.  Another  advantage  of  both  systems  is 
that  under  high-stress  conditions  with  peak  visual  load,  this  type  of  system  permits  the  pilot  to 
evaluate  the  criticality  of  the  problem  without  adding  to  his  visual  workload.  It  was  concluded, 
therefore,  that  the  number  of  information-gathering  steps  required  to  identify  the  nature  of  an  alert 
should  be  minimized  and  that  voice  warnings  should  be  used  wherever  possible  for  high-priority 
alerts.  Based  on  these  data  and  other  experiments  with  voice  alerting  systems,  the  recommended 
practices  for  voice  alerting  systems  are; 

• Reserve  voice  warnings  for  highest  priority  alerting  situations. 

I 

• Voice  alerts,  when  actuated,  should  attenuate  messages  and  signals  of  lower  priority. 

• Pilots  should  be  familiar  with  all  the  messages. 

• Messages  should  be  constructed  of  short  sentences  of  polysyllabic  words. 

The  time  from  detection  to  response  is  also  affected  by  the  time  required  for  each  step  In  the  data 
collection.  At  each  step  in  the  data  collection,  the  observer  must  detect  and  locate  a signal  and  tlien 
process  the  Information  in  that  signal.  The  time  for  each  step  is  dependent  upon  the  following 
factors: 

• Time  required  to  process  the  information  in  the  present  step 

• Time  required  to  change  from  one  signal  source  to  the  next 
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The  time  to  process  the  information  in  any  one  step  is  dependent  upon  the  amount  of  information 
in  that  step  and  the  rate  at  which  the  information  can  be  assimilated.  The  rate  of  data  assimilation  is 

directly  related  to  the  number  of  absolutely  identifiable  signals  used  for  data  transmission.  The  p 

experimental  data  indicated  that  the  faatest  assimilation  rates  occur  with  larger  signal  vocabularies  1| 

than  those  currently  used  for  alerts  on  commercial  aircraft.  However,  this  conclusion  is  valid  if,  and 
only  if,  the  signals  are  not  confusable.  The  inclusion  of  confusable  signals  reduced  the  Information 
assimilation  rate  and  led  to  errors.  I 

The  primary  factor  affecting  the  time  required  to  change  from  one  signal  to  the  next  Is  search  time,  I i 

i.e.,  the  number  of  stimuli  the  subject  must  reference  to  obtain  the  required  information  and  the  data 
assimilation  characteristics  of  each  stimulus.  From  the  exterimental  data,  it  wps  concluded  that  the  I < 

longest  time  required  for  shifting  fVom  one  signal  to  another  occurs  when  the  first  signal  does  not  i ^ 

give  the  precise  location  of  the  second  signal,  and  the  second  signal  is  a visual  stimulus. 

The  environment  in  which  pilots  must  operate  may  also  affect  their  alert  reaction  time.  No  directly  ^ 

applicable  quantified  data  were  available  on  this  effect.  However,  the  experimental  evidence  does  1 

indicate  that  the  response  to  any  stimulus  is  very  much  dependent  upon  the  number  of  possible  | J 

responses  to  that  stimulus  as  well  at  the  number  of  possible  responses  to  all  other  stimuli.  In  general, 
any  environmental  factor  that  increases  the  demands  on  the  pilot  will  Increase  the  time  signal  detec*  i :i 

tion  to  response.  | | 

■i 

The  performance  of  airplane  pilots  is  strongly  affected  by  skills  that  they  have  learned  previously  in  ! 

other  situations,  The  effect  of  a previously  learned  skill  on  performance  in  a new  situation  is  called  \ • 

transfer  of  training.  There  are  two  types  of  transfer  of  training-positive  transfer  and  negative  transfer,  i 

Positive  transfer  is  any  Improvement  In  performance  due  to  previous  experience  and  usually  occurs  ' - 

when  the  response  to  be  made  in  a new  situation  is  similar  to  the  response  made  in  a previous  situa* 
tion.  Negative  transfer  is  any  detriment  in  performance  due  to  previous  experience  end  usually  J i 

occurs  when  the  response  to  be  made  in  a new  situation  is  different  than  the  response  that  was  \ '' 

made  in  a previous  situation,  i 

The  signal-response  relationships  are  often  not  the  same  in  different  aircraft.  This  may  result  in  nega- 
tive transfer  of  the  pilot's  experience.  A study  of  the  effects  of  negative  transfer  on  crew  perfor- 
mance was  reviewed  in  order  to  assess  the  significance  of  this  factor,  It  wav  found  that  pilots  who 
are  crosstrained  to  fly  several  different  types  of  aircraft  do  make  incorrect  responses  that  can  be 
attributed  to  this  negative  transfer  effect.  To  minimize  this  effect,  it  was  concluded  that  all  alerting 
signals,  particularly  high-priority  alerts,  should  be  standardized  on  all  aircraft. 

2.4.2  REQUIREMENTS  FOR  ADDITIONAL  DATA 

In  addition  to  providing  data  for  the  formulation  of  alerting  system  design  guidelines,  another  major 
objective  of  the  literature  review  was  to  assess  the  adequacy  of  the  existing  data  and  recommend 
research  efforts  necessary  to  complete  the  data  base.  Three  tasks  were  undertaken  to  accomplish  this 
objective.  First  the  data  wore  evaluated  and  categorized  Into  two  groups,  those  research  efforts  direc- 
tly applicable  to  the  design  of  alerting  systems  and  those  that  provided  data  which,  while  nut  quan- 
titatively applicable,  provided  Indications  of  the  direction  of  the  effects.  Short  abstracts  of  the  data 
from  the  studies  and  military  standards  that  fall  Into  these  two  categories  are  tubulated  in  appendix 
H.  The  second  tusk  was  ( 1 ) to  delineate  those  arcus  where  more  data  are  required  to  provide  an  ade- 
quate data  base,  and  (2)  to  prioritize  those  needs  so  that  appropriate  research  objectives  and  plans 
could  be  formulated  In  the  third  tusk. 


2.4.2.  t Adequacy  of  Data  in  Literature 


The  data  evaluation  portion  of  the  review  aueued  each  of  the  areas  of  concern  listed  In  table  19. 
Two  aspects  of  the  research  data  for  each  area  were  evaluated  to  determine  their  usefulness  In  devel- 
oping design  requirements.  Most  important  was  the  relevance  of  the  data  to  the  signal  detection  and 
response  process.  Many  of  the  studies  that  were  evaluated  were  not  applicable  even  though  they 
de^t  with  human  sensory  mechanisms.  The  remaining  data  were  then  reviewed  and  classified  as  to 
the  applicability  of  the  quantitative  results. 

Tliose  data  that  were  obtained  in  an  actual  or  simulated  aircraft  cockpit  using  a flight-type  task  were 
considered  to  be  directly  applicable.  In  these  studies  the  observer  was  required  to  do  a primary  task 
(i.e,  tracking  a prescribed  course  or  listening  to  an  air  traffic  controller)  and  simultaneously  respond 
correctly  to  any  alerting  signal.  The  quantitative  results  of  this  type  of  study  closely  resembled  what 
may  be  expected  in  the  "real”  flight  situation.  This  class  of  study  included  approximately  20%  of 
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the  cited  works  (see  appendix  H).  The  other  80%  of  the  studies  were  primarily  laboratory  studies  to 
obtain  basic  research  data.  These  studies  in  general  used  as  their  unit  of  measurement  the  time  it 
takes  the  obseiver  to  react  to  the  signal  (reactive  time)  when  that  was  the  only  task  that  he  had  to 
do.  The  quantitative  aipplicaibility  of  these  types  of  data  to  in-flight  alerting  situations  is  suspect 
because  of  the  unreaUetio  ni£ure  of  the  data-collectlon  process.  What  can  be  said  Is  that  the  time 
data  gathered  in  these  studies  is  the  minimum  expected  response  time  for  a particular  sensory  chan- 
nel and  that  the  highest  frioidt^  alerts  should  attempt  to  produce  this  time  as  optimum.  Even  though 
the  actual  quantitative  time  data  from  these  studies  may  not  be  directly  relevant  to  cockpit  situa- 
tioasi,  th«  Information  gained  about  the  relationship  between  variables  can  bc  used  in  many  cases, 

Per  M»mple,  the  real  «ffeet  of  signal  location  on  detection  time  has  not  been  quantified  in  the 
llteratitre.for  fidl  range  of  signals.  However,  there  are  simple  teactlon  time  data  that  indicate  a 
trend-teward  ihsaieer  reaction  as  deviation  from  the  llneof-slght  Increases.  These  data  may  be  used  at 
an  li^atlem  of  Ihe  rilative  effect  of  different  locations  if  detection  time  is  a design  criteria.  Another 
and  possible  more  important  source  of  information  in  these  types  of  data  is  the  number  of  times  the 
observer  missed  the  signal  or  gave  **no  response.”  These  data,  although  still  not  directly  applicable, 
quantitatively  will  come  closer  to  "real  world”  values  because  they  are  not  time  dependent. 

These  types  of  evaluations  were  made  for  the  data  collected  in  each  of  the  areas  of  concern.  Follow- 
ing this  process,  it  was  determined  that  the  amount  of  directly  usable  data  for  all  areas  of  concern 
was  sufficiently  low  to  warrant  augmentation.  Since  the  amount  of  data  needed  was  large,  a method 
of  prioritization  was  needed. 

2.4, 2.2  Prioritization  of  Missing  Data 

Rating,  ranking,  and  paired  comparison  techniques  were  used  to  prioritize  the  data  needs.  Two 
questionnaires  were  developed  using  the  matrices  Illustrated  in  flgures  30  through  33.  Bach  ques- 
tionnaire was  distributed  to  one  of  two  groups  of  seven  people  in  the  Boeing  flight  deck  design 
organization  along  with  the  data  that  had  been  gathered  and  abstracted  (tee  appendix  H),  The  first 
group  of  seven  were  told  that  "each  cell  In  the  matrices  (excluding  the  diagonals)  represented  a com- 
parison between  two  variables,  l.e.,  size  and  location.”  Their  task  wu  to  (1)  review  the  data  that 
had  been  collected,  (2)  compare  the  importance  of  obtaining  more  data  about  each  variable,  and 
(3)  indicate  the  variable  for  which  more  data  were  moit  needed  by  putting  its  number  in  the  cell. 
This  paired  comparison  technique  allowed  the  comparison  of  each  variable  with  every  other  variable 
and  the  ranking  of  the  variables  according  to  their  importance. 

Another  objective  of  the  prioritization  scheme  was  to  determine  how  the  variables  should  be  com- 
bined in  the  testing  phase  to  produce  the  most  effective  data.  To  accomplish  this  objective,  a second 
group  of  seven  raters  was  told  that  "each  cell  In  the  matrices  represented  either  a single  variable  (the 
diagonals)  or  a combination  of  two  variables,  l.e.,  size  and  location."  They  were  to  assume  for  the 
latter  case  that  the  combinations  of  the  variables  was  producing  an  effect  on  signal  detection  and 
that  It  was  the  Importance  of  obtaining  additional  data  on  that  effect  which  they  were  rating.  Two 
variables  were  used  as  the  maximum  number  of  combined  variables  because  it  was  felt  that  the  diffi- 
culty of  rating  any  more  combinations  would  detract  from  the  usefulness  of  the  flndings.The  rater's 
task  was  to  rate  the  importance  of  collecting  data  for  each  cell  on  a four-point  scale. 


FigunX  Daa  OtHectkm  nmritY  far  Vmta!  Caution  and  Wanting  Signals 


Figun32  Oa^  Collecbon  Priority  for  Verbal  AuditorY  Caution  amt  Warning  Signals 


Figm33  Oats  CoOeamin  for BimoiU (AuMory^Vimlt 


The  results  from  the  two  sets  of  matrices  were  combined  to  form  the  prioritization  that  con  also  be 
seen  in  Hgures  30  through  33.  The  diagonal  priorities  represent  the  importance  of  individual  variables 
and  the  other  cell  piioritles  the  importance  of  the  two  variable  interactions.  To  assess  the  validity  of 
the  responses,  two  variables-vlsual  signal  size  and  aural  Intenslty-were  included  even  though  they 
were  covered  by  directly  applicable  data  in  the  literature  review.  Both  of  these  variables  were  low 
priority  in  the  survey. 

2.4.2.3  Teat  Plans  for  Acquiring  Missing  Data 

The  hlgh'priorlty  data  requirements  established  in  figures  30  through  33  were  evaluated  end  a set  of 
19  three-page  test  plans  was  constructed.  The  groundrules  followed  for  the  first  cut  at  defining 
required  test  programs  were: 

• Use  as  many  of  the  high-priority  data  cells  as  possible. 

• The  number  of  variables  and  levels  should  be  chosen  to  provide  approximately  2 weeks  of  test- 
ing per  teat  plan. 

f 

• The  test  design  should  be  statistically  sound. 

The  resulting  test  designs  are  presented  in  appendix  1.  It  should  be  noted  that  if  the  time  restraints 
(2  weeks  testing  per  test  plan)  are  relaxed,  some  of  the  test  plans  can  be  expanded  quite  easily  to 
Include  a larger  number  of  variables. 

These  test  plans  deflne  only  the  testing  necessary  to  fill  the  moat  important  gaps  in  the  human  fac- 
tors data  required  to  design  alerting  systems.  Elements  of  alerting  systems  will  be  evaluated  by  these 
tests.  Then  alerting  system  concepts  baaed  on  substantiated  design  data  can  be  developed.  Another 
set  of  tests  that  provide  comparative  evaluations  of  these  concepts  are  then  required  in  order  to  vali- 
date the  ideas  incorporated  therein.  The  exact  nature  of  these  comparative  tests  has  not  been  defined 
yet. 


2.S  PRELIMINARY  RECOMMENDATIONS  FOR  STANDARDIZATION  OF  ALERTING 

METHODS  AND  FUNCTIONS 

Current  alerting  methods  and  the  inconsistencies  In  the  alerting  philosophies  applied  thereto  were 
reviewed  in  section  2.1.  Alerting  function  and  system  requirements  were  established  in  section  2,2. 
The  rationale,  criteria,  and  method  for  prioritizing  the  alerting  functions  were  developed  In  section 
2,3,  A review  of  the  human  factors  data  applicable  to  designing  alerting  systems  was  presented  in 
section  2.4,  These  four  aspects  of  developing  alerting  systems  were  combined  to  fornnilute  imllinl- 
iwry  revommeudaUom  for  standardizing  alerting  methods  and  functions.  The  recommendations,  u 
sample  alerting  system  concept  that  conforms  with  these  recommendations,  and  an  analysis  of  the 
conflicts  between  tlie  proposed  prioritized  alerting  systems,  tradition  and  existing  requirements  are 
presented  In  this  section. 


2.5.1  RLCOMMENDED  DESIGN  GUIDELINES 


A The  recommendations  presented  in  this  section  should  not  be  Interpreted  as  firm  y 
y design  guidelines  or  as  minimum  performance  standards.  At  this  time,  these  guide*  A 
A lines  have  been  only  partially  substantiated.  Significant  testing  Is  still  required'  to  y 
y validate  these  guidelines.  A 
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The  Interactions  between  the  data  presented  in  the  previous  sections  were  analyzed,  agreements, 
correlation  and  conflicts  were  noted,  and  preliminary  design  guidelines  (not  minimum  performance 
standards)  for  alerting  systems  were  formulated. 


The  design  guidelines  were  oriented  to  provide  the  following  type  of  alerting  system  characteris- 
tics and  cockpit  environment: 

• A consistent  design  philosophy  that  can  be  applied  to  all  new  aircraft,  irrespective  of 
manufacturer, 

• Quiet)  dark  cockpit  when  all  systems  are  operating,  normally  and  when  abnormal  situations 
have  been  "cleaned-up”  (except  automatic  flight  control  mode  annunciators), 

• Associate  a unique  audio,  visual,  or  combination  audio-visual  method  of  alerting  with  each 
alert  priority  level, 

9 Provide  alerting  system  growth  capability  in  a form  that  does  not  necessitate  additional  discrete 
annunciators. 

Accordingly,  the  following  preliminary  design  guidelines  are  recommended. 


Prioritization 


• Selected  alerts  should  be  categorized  as  a function  of  criticality  and  flight  phase.  Category  cri- 
teria are  presented  in  table  14.  Flight  phases  that  n^lght  be  considered  are  defined  in  table  15. 

• Selected  alerts  within  each  category  should  also  be  prioritized  as  a function  of  criticality. 

Inhibits 

• The  number  and  type  of  alerts  that  can  be  annunciated  during  critical  phases  of  flight  shouid 
be  restricted. 

• Prioriti/utlon  of  the  alerts  may  be  used  as  a method  of  inhibiting  or  at  least  atteiuiutlng  non- 
essential  alerts. 
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Visual  Alerts 


• An  alphanumeric  readout  device,  located  in  front  of  each  pilot,  should  be  provided  to  identify 
wamins-  and  caution*type  alerts. 

• Discrete  alerts-V^erever  possible,  reduce  the  number  of  annunciations  in  the  cockpit. 

-Advisory  lights  should  not  illuminate  unless  a discrete  crew  action,  such  as 
pushing  a button,  is  performed  (except  automatic  flight  control  mode 
annunciators). 

• Red  alerts-AppIy  only  to  situations  Where  immediate  action  is  required,  l.e.,  only  LEVEL  1 

alerts. 

-Use  when  annunciation  by  an  aural  alert  plus  the  alphanumeric  readout  devices  is 
not  adequate. 

• Amber/yellow  alerts-Apply  only  to  situations  that  require  immediate  crew  awareness  and 

eventual  action,  l.e.,  only  to  LEVEL  2 alerts. 

I * ■ 

-Use  when  annunciation  by  the  common  aural  alert  for  all  LEVEL  2 items 
and  the  alphanumeric  readout  devices  is  not  adequate. 


• Green  olerts-Use  to  confirm  the  SAFE  OPERATION  or  GO  status  of  a system, 

-A  manual  action  by  the  crew,  such  as  pushing  a button,  should  be  required  to 
illuminate  green  lights  (except  automatic  flight  mode  annunciators). 

• Blue  alerts-Use  to  annunciate  intranslt  conditions. 

-A  manual  action  by  the  crew,  such  as  pushing  a button,  should  be  required  to 
Illuminate  blue  liglits  (except  automatic  flight  mode  annunciators), 

• Wlrite  alerts-Use  for  illuminating  keyboards  and  annunciating  ON/OFF  system  modes,  l.e., 

when  used  in  place  of  toggle  switches. 

• Location-LEVEL  1 alerting  devices  (warning)  should  be  located  within  15°  of  the  pilot’s 

centerline  of  vision  (centerline  of  vision  is  defined  as  the  line  between  the  pilot’s' 
eye  reference  point  and  the  center  of  the  ADI). 

-LEVEL  2 alerting  devices  (cautions)  should  be  located  within  30°  of  the  pilot’s 
centerline  of  vision. 

-Green,  blue,  and  white  lights  can  be  located  anywhere  in  the  cockpit  that  is  readily 
visible  to  the  crew. 

-All  alerts  presented  by  discrete  lights,  flags,  or  bands  should  be  repeated  on  the 
alphanumeric  readout  device  (except  automatic  flight  mode  annunciators). 
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« Size- High  priority  lights  (associated  with  LEVEL  1 and  2 alerts)  should  be  no  less  than  1° 
visual  angle  in  size. 

-Secondary  lights  (associated  with  LEVEL  i and  lower  priority  alerts)  should  be  no  less 
than  0.5°  visual  angle  in  size. 

• Brlghtness-LEVEL'  1 alerts  should  have  a brightness  capability  of  at  least  ISO  ft-L  and  should 

be  at  least  twice  as  bright  as  other  displays  in  the  vicinity  of  the  alert. 

-LEVEL  3 and  lower  priority  alerts  should  have  a brightness  capability  of  at  least 
15  ft-L  and  should  be  at  least  10%  brighter  than  honalert  displays  in  the  vicinity 
ofthealert.  , 

-Automatic  brightness  adjustment  for  varying  ambient  light  conditions  should  be 
provided. 

• Flashing-Use  only  for  highest  priority  (LEVEL  1)  alerts. 

Aural  Alerts 

• Application-Use  discrete  aural  alerts  to  annunciate  highest  priority  situations  (LEVEL  1 alerts) 

and  to  attract  attention  to  LEVEL  2 alerts  on  the  alphanumeric  readout  device. 

• Maximum  number-Less  than  four  familiar  alerts  (based  on  pilot  opinion). 

-If  the  number  of  discrete  aural  and  tactile  alerts  exceeds  seven,  they  should 
be  supplemented  by  voice  annunciations. 

• Intensity-Should  be  less  than  intensity  of  most  currently  used  aural  alerts. 

-Maximum  intensity  of  IS  dB  above  threshold  noise  level  or  halfway  between  thres- 
hold level  and  110  dB,  whichever  is  less. 

"Automatic  Intensity  adjustment  for  varying  ambient  noise  conditions  should  be 
provided. 

-Aural  alerts  associated  with  LEVEL  1 items  should  br  noncancellable  without  cor- 
rection of  the  fault  or  situation. 

-A  means  of  reducing  the  annoyance  of  continuous  aural  alerts  after  initial  recogni- 
tion is  achieved  should  be  provided. 

-A  means  of  disabling  any  nuisance  actuation  of  an  aural  alert  should  be  provided  in 
a form  that  does  not  affect  the  integrity  of  the  other  aural  alerts  (e.g.,  one  circuit 
breaker  or  guarded/wired  shutoff  switch  for  each  aural  alert). 


• Soiiiul  cliiiructfristics  tadi  signal  should  be  composed  of  two  or  more  widely  separated  fre- 

quencies in  the  range  from  2504000  Hz. 

-Intermittent  signals  should  be  used. 

• Voice  characteristics -Messages  should  be  preceded  by  an  identifier  to  which  the  pilot  is  more 

than  normally  sensitive  (attention  getter). 

-Messages  should  be  constructed  of  short  sentences  of  polysyllabic  words. 
-Pilots  should  be  familiar  with  all  voice  messages. 

• Location -Aural  alerts  should  appear  to  emanate  from  the  vicinity  of  the  alphanumeric  readout 

device. 


Tactile  Alerts 

• Minimize  use  of  tactile  alerts. 

Master  Warntng/Master  Caution 

• A master  warning  signal  and  a master  caution  signal  should  be  located  in  front  of  each  pilot  if 
the  alphanumeric  readout  display  is  located  outside  the  pilot’s  primary  field  of  view. 

• All  LEVEL  1 alerts  should  activate  the  master  warning  signal  (if  utilized). 

• All  LEVEL  2 alerts  should  activate  the  master  caution  signal  (if  utilized). 

• No  LEVEL  3 or  4 alerts  should  activate  the  master  warning  or  master  caution  signals  (if 
utilized). 

Checklists 

• Type  of  alert  and  type  of  checklist  used  to  rectify  an  annunciated  situation  should  correlate. 

• Emergency  procedures  should  be  associated  only  with  LEVEL  1 (warning  type)  alerts. 

• Abnormal  procedures  should  be  associated  only  with  LEVEL  2 (caution  type)  alerts. 

NOTE:  A checklist  is  not  necessarily  associated  with  each  LEVEL  1 or  LEVEL  2 Item,  and  an 
alert  is  not  necessarily  associated  with  each  checklist. 

2.5.2  SAMPLE  ALERTING  SYSTEM  CONCEPT  THAT  CONFORMS  WITH  RECOMMENDED 
DESIGN  GUIDELINES 

One  of  the  primary  goals  of  this  study  is  to  provide  preliminary  design  guidelines  for  achieving  a 
quite,  dark  cockpit  when  all  systems  are  operating  normally  and  when  abnormal  situations  have  been 
"clenned-up."  With  the  quiet,  dark  cockpit  concept,  all  visual  and  auditory  alerting  devices  except 
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automatic  flight  mode  anniinciutors  would  be  OFF  unless  ( 1 ) an  abnormal  situation  exists  or  (?.)  the 
crew  desires  annunciation  of  a specific  situation.  The  amount  of  advisory  and  status  information  in 
the  cockpit  would  be  minimized.  The  crew  would  have  the  capability  to  enable  or  disable  certain 
annunciations,  primarily  status  information.  Manual  action  by  the  crew  would  be  required  to  a 
momentary  display  of  certain  annunciations,  e.g.,  the  annunciation  of  Intransit  conditions.  The 
crew  would  then  have  a “clean”  cockpit  to  work  in,  would  not  become  insensitive  to  common 
annunciations,  and  would  recognize  and  be  able  to  correct  abnormal  situations  more  rapidly  than  in 
current  cockpits. 

The  recommended  preliminary  design,  guidelines  could  be  applied  as  follows  to  fulfill  this  objective. 
Discrete  aural  alerts  were  recommended  for  annunciating  LEVEL  1 situations,  for  attracting  atten* 
tlon  to  the  alphanumeric  display  when  LEVEL  2 situations  arise,  for  annunciating  assigned  altitude 
deviations  and  decision  height,  and  possibly  for  annunciating  incoming  communications.  Accordingly, 
a unique  discrete  aural  alert  might  be  required  for  each  of  the  following  situations: 

• Gear  down  and  locked  but  lever  not  in  down  detent 

• Unsafe  takeoff  configuration 

• Unsafe  landing  configuration 

• Ground  proximity  warning 

• Rapid  depressurization 

• Autopilot  disconnect 

• Common  attention-getting  tone  for  all  LEVEL  2 alerts 

• SELCAL 

• Cabin  call 

• Data  link 

• Decision  height 

• Altitude  alert  (altitude  deviations) 

Thus  12  discrete  aural  alerts  would  be  required;  however,  another  guideline  stated  that  the  number 
of  aural  alerts  should  not  exceed  4 (pilot  opinion).  The  number  of  discrete  aurals  can  be  reduced 
almost  to  this  number  by  retaining  the  traditional  horn  for  all  LEVEL  1 “unsafe  configuration" 
warnings;  by  Incorporating  the  alerts  for  SELCAL,  cabin  call,  and  data  link  into  the  integrated  alert- 
ing system  as  LEVEL  2 alerts;  and  by  using  a command  aural  alert  for  decision  height  and  altitude 
deviations.  One  aural  alert  could  be  used  for  unsafe  takeoff  configuration,  unsafe  landing  configura- 
tion, and  gear  down  and  locked  but  lever  not  in  down  detent. 

The  central  alphanumeric  readout  device  could  simultaneously  denote  the  exact  nature  of  the  epn- 
figiiration  problem.  Similarly,  the  common  tone  used  for  all  LEVEL  2 alerts  could  be  used  for 
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annunciating  incoming  SHLCAL,  cabin  call,  and  data  link  messages,  and  the  alphanumeric  readout 
device  could  denote  the  specific  communication  channel  requiring  attention.  Decision  height  could 
not  be  Included  as  a LEVEL  2 alert  because  the  pilot  cannot  afford  to  divert  his  attention  to  read- 
ing the  alphanumeric  display  at  the  critical  time  when  this  Is  annunciated.  Thus  decision  height  and 
altitude  alert  require  a separate,  distinct  aurai  aiert.  By  implementing  the  system  in  this  manner,  the 
number  of  aurai  and  tactile  alerts  would  be  reduced  to  six. 


The  number  of  potentiaiiy  ambiguous  aurai  alerts  could  be  even  further  reduced  by  using  voice 
annunciations  for  ail  other  LEVEL  I alert  situations  listed  above.  However,  the  effects  of  extensive 
application  of  voice  aiert  annunciations  are  not  known  at  this  point.  Current  experience  with  voice 
alerting  systems  has  not  been  satisfactory.  The  type  of  systems  descrlb'.-d  above  wherein  a small 
number  of  discrete  aurals  are  used  in  conjunction  with  an  alphanumeric  display  is  thus  recommended 
at  this  time. 

In  addition  to  these  types  of  annunciation  for  the  high-priority  alerts,  a very  limited  number  of  green, 
blue,  and  white  advisory  alerts  would  be  utilized.  A third  switch  state  might  be  added  to  the  lights 
test  switch  to  handle  these  alerting  functions.  The  three  lights  test  switch  positions  would  be  reas- 
signed to  provide  the  following  functions: 

1- 

• TEST-All  lights  ON  to  test  light  sources  plus  test  pattern  on  alphanumeric  display  to  validate 
operation  of  display. 

• IMMEDIATE  SITUATION-All  faults,  Intranslt  conditions,  etc.,  would  be  annunciated  as  thdy 
occur.  Existing  alert  situations  would  also  be  annunciated.  Alerting  system  operation  would 
as  in  current  aircraft. 

• CLEAR-Thls  would  cancel  all  currently  displayed  alerts  except  warnings  and  automatic  flight 
mode  annunciations  and  provide  a relatively  quiet,  dark  cockpit.  No  Intransit  or  SAFE/GO 
conditions  would  be  automatically  annunciated  while  the  system  is  in  tills  state.  Only  new  cau- 
tions and  warnings  would  be  automatically  annunciated.  Any  new  caution  annunciation  could 
be  "cleared”  by  switching  from  CLEAR  to  IMMEDIATE  SITUATION  and  back  to  CLEAR.  A 
small  pushbutton  might  be  added  to  each  system’s  panel.  While  in  this  alerting  system  operating 
mode,  the  crew  could  get  all  green,  blue,  and  white  liglit  annunciations  on  that  system  panel 
by  pushing  this  button.  This  would  provide  the  crew  with  selective  alert  annunciation  capability. 


^\\\\\K\\\\\\\\\\\\\\\\\\\\\^^^ 
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These  alerting  system  implementation  ideas  are  at  this  point  only  preliminary  sugges- 
tions and  examples  of  how  the  design  guidelines  could  be  opplled  to  (1)  clean  up  the 
cockpit,  (2)  provide  the  crew  with  the  capability  to  select  an  alerting  system  operat- 
ing mode  that  is  similar  to  current  aircraft,  and  (3)  provide  the  crew  with  the  capa- 
bility to  select  an  alerting  system  operating  mode  that  results  in  a relatively  quite, 
dark  cockpit  when  all  systems  are  operating  normally  and  when  abnormal  situations 
have  been  "cleaned  up.”  These  ideas  represent  only  several  of  many  ways  in  which 
un  alerting  system  could  be  Implemented  and  still  conform  to  the  recommended 
design  guidelines.  More  refinement,  testing,  and  analysis  of  the  hardware/lmplemen- 
tatlon  Impact  of  these  concepts  are  required  to  validate  them. 


! 
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2.5,3  CONFLICTS  BETWEEN  TRADITION.  REQUIREMENTS,  AND  RECOMMENDED  DFSKiN 
GUIDELINES 

The  preliminary  design  guidelines  recommended  in  section  2.5.1  conflict  with  traditional  alerting 
system  concepts  and  with  the  requirements  in  the  following  areas: 

• Elimination  of  traditional  aurals 

• Downgrading  of  several  alerts  previously  considered  high-priority  Items 

• Terminology  used  In  the  FARs 

The  priority  system  proposed  in  table  16  conflicts  with  tradition  by  eliminating  several  traditional 
aural  alerts.  This  priority  system  would  eliminate  the  unique  aural  alerts  associated  with  fire,  exces- 
^ slve  airspeed,  stabilizer  in  motion,  and  below  glide  slope  warnings.  Many  pilots  feel  that  these  aural 

: alerts  are  sacrosanct.  However,  the  analyses  showed  that  the  required  pilot  response  to  these  alerts 

is  not  Immediate  action.  Thus,  they  do  not  qualify  as  LEVEL  1 alerts  and  do  not  deserve  unique 
’ discrete  aurals. 

! The  proposed  priority  system  also  conflicts  with  tradition  by  downgrading  several  alerts  previously 

considered  hlgli-priority  alerts  from  red  lights  to  amber  lights  or  no  lights  ut  all  (Just  an  alphanumeric 
t identification).  In  the  case  of  the  737,  autopilot  disconnect,  fire,  gear  unlocked,  and  gear  not  down 

I and  locked  with  thrust  lever  at  idle  are  examples  of  traditionally  large,  red  light  alerting  functions 

I that  might  be  downgraded.  The  amber  flight  director  mode  ‘‘armed’*  annunciations  are  examples  of 

I alerting  functions  that  might  be  downgraded  or  modified  so  as  not  to  imply  a “caution”  situation. 

I Similarly,  other  functions  might  be  upgraded.  The  blue  lights  used  to  annunciate  APU  oil  quantity 

I low  and  thrust  reverser  armed  are  examples  of  such  alerts.  In  a new  aircraft,  these  alerts  might  be 

tv  upgraded  to  amber  lights  and  green  lights,  respectively,  so  as  to  make  the  color  of  the  light  reflect 

the  criticality  of  the  situation, 

I;  Federal  Aviation  Regulations  (FARs)  use  the  word  “warning”  indiscriminately.  Examples  of  where 

\ such  usage  occurs  in  the  FARs  are  tabulated  in  table  20.  If  the  guidelines  recommended  herein  are 

adopted,  the  language  in  these  FARs  will  have  to  be  modified.  It  is  suggested  that  the  type  of  termi- 
nology used  in  other  sections  of  these  FARs  to  indicate  a recv.irement  for  an  alert  be  extended  to 
all  FARs  and  that  the  term  “warning"  be  deleted.  Examples  oi  such  terminology  are  the  following: 

!• 

• “Means  to  indicate" 

• “An  aural  or  visual  signal” 

• “Means  must  be  provided  to  alert  the  crew” 


Tabh  20  Federal  Aviation  Regulations  Using  the  Term  "Warning" 

26.207(b) 

26.720(e)(2),  (3)  end  (4) 

26.777(c) 

26.812(e)(2) 

26.841(b)(6)  end  (7) 

26.860(e)(3) 

26.1165(0) 

26.1203(b)(3) 

26.1303(c)(1) 

26.1306 

26.1300(c) 

26.1363(c)(5)(li)end  (III) 

37.201(e)(3) 

91.40 

121.260(e)end  (b) 

121.360(b)  and  (c) 
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3.0  CONCLUSIONS 


9sN\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\^^ 

»■ 

The  alerting  system  implementation  guidelines  specified  herein  should  be  interpreted  ^ 
as(D;:)/'e//mhiarv,not  final, design  guidelines, and (2) design  objectives, not  minimum 
performance  standards,  The  recommended  design  guidelines  are  only  partially  sub- 
stantiated by  quantitative  data  -they  represent  our  best  implementation  ideas  at  this 
time.  Additional  testing  to  Cl)  derive  directly  applicable  human  factors  data,  (2) 
quantify  the  effectiveness  of  various  elements  of  alerting  systems,  and  (3)  quantify 
the  effectiveness  of  various  full  alerting  system  concepts  plus  an  analysis  of  the 
hardware/lmplementatlon  impact  of  these  concepts  are  required  to  complete  and 
validate  the  proposed  design  guidelines, 


I 
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The  following  conclusions  are  tlic  results  of  analyses  of  current  alerting  methods  and  requirements, 
the  development  of  alert  prioritization  criteria,  and  a survey  of  human  factors  data  pertinent  to  the 
design  of  alerting  systems. 

The  aircraft  operators  and  manufacturers  apparently  feel  the  pilots  need  more  in-flight  malfunction 
resolution  capability  and  need  to  record  better  maintenance  data.  Thus  each  new  aircraft  has  incor- 
porated more  alerting  functions  spcciilcully  due  to  a trend  toward  providing  the  crew  with  more 
detailed  subsystem  infonnation.  The  most  rapid  growth  in  the  number  of  subsystem  alerts  has 
occurred  in  the  electrical,  navigation,  and  automatic  flight  control  systems.  Negligible  growth  has 
occurred  In  the  air-conditioning,  altitude  alert,  APU,  communications,  emergency  equipment,  flight 
instrument,  air  data,  fuel,  and  powerplant  systems,  .All  other  systems  have  exhibited  moderate 
growth  In  the  number  of  alerts.  With  this  proliferation  of  alerts,  the  cockpits  have  become  saturated 
with  information  systems.  More  multlfunctioning  of  the  alerts  is  being  used  to  get  around  the  lack 
of  panel  space  problem.  The  Inclusion  of  these  devices  is  adding  to  the  potential  for  confusion  in 
the  cockpit. 

The  number  of  alerts,  especially  the  number  of  aural  alerts,  should  be  reduced.  The  potential  for 
confusion  exists  with  this  many  alerts.  To  maximize  the  effectiveness  of  the  alerts,  noncritical  alerts 
should  be  Inhibited  during  high  workload  periods  such  us  takeoff  and  flure/landlng.  Prioritization  of 
the  alerts,  so  as  to  identify  the  most  criticid  problem,  should  also  be  considered. 

Prioritization  of  the  alerting  functions  currently  must  be  accomplished  via  subjective  methods. 
Numerical  methods  require  additional  quantitative  data  about  crew  reliability  and  pilot  latency,  and 
the  effects  of  workload  on  these  two  factors,  or  the  time  history  of  the  alrcrutVs/system’s  perfor- 
mance degradation  us  related  to  each  alert. 

Criteria  for  four  levels  of  alerting  function  prioritization  are  available.  Most  organizations  working 
toward  developing  standards  for  alerting  systems  buslcully  agree  with  tlte  four  levels  of  priority 
established  in  this  study  and  the  criteria  defining  these  levels.  Minor  grammutlcul  differences  remain 
to  be  “Ironed  out," 


Standardization  of  the  alerting  function  priorities  may  be  possible  for  alerts  within  the  two  highest 
priority  levels,  However,  the  alerts  within  the  two  lowest  priority  levels  are  too  dependent  on  each 
aircraft’s  unique  design  features  to  be  amenable  to  priority  standardization. 

A unique  audio,  visual,  or  combination  audiovisual  method  of  alerting  should  be  associated  with 
each  priority  category  to  provide  an  instantaneous  assessment  of  the  alerting  situation’s  criticality. 
Human  factors  data  pertinent  to  optimizing  this  audio-visual  interface  with  the  pilot  are  available. 
However,  the  data  are  incomplete  and  further  testing  of  specific  elements  of  alerting  systems  is 
required  to  fill  the  major  data  gaps. 

Preliminary  design  guidelines  for  standardization  of  alerting  functions  and  methods  are  available. 
The  basic  guidelines  specified  in  section  2.5.1  are  recommended.  Numerous  conflicts  exist  between 
these  guidelines,  traditional  alerting  system  concepts,  and  existing  regulations.  Most  conflicts  with 
existing  regulations  can  be  resolved  with  minor  modifications  of  the  language  used  to  indicate  a 
requirement  for  an  alert. 

Additional  comparative  testing  of  elements  of  alerting  systems  and  full  alerting  system  concepts 
plus  analyses  of  the  hardware  implementation  characteristics  of  these  concepts  are  required  to 
complete  and  validate  the  proposed  design  guidelines. 
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APPENDIX  A 


TABULATION  OF  ALERTING  FUNCTIONS  AND  IMPLEMENTATION  CHARACTERISTICS 

This  appendix  provides  detailed  descriptions  of  the  alerting  functions  in  a typical  configuration  of 
each  basic  type  of  commercial  turbojet  transport  aircraft.  To  simplify  this  tabulation,  similar  types 
of  indications  were  consolidated  under  one  title.  Examples  are:  (1)  red  bands,  red  limit  marks,  and 
pink  limit  marks  were  consolidated  under  the  title  "red  bands”  because  they  have  similar  operational 
Implications;  (2)  fire  orange  flags  used  as  warning  indications  were  tabulated  as  red  flags;  and  (3) 
yellow  lights  were  tabulated  as  amber  lights. 

The  asterisks  on  tables  contained  in  this  section  mean  “same  as.” 
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APPENDIX  B 

DETAILED  DATA  USED  IN  ALERTING  FUNCTION  AND  CHARACTERISTICS  ANALYSES 


LIGHTS  OR 


1M 


17, B 


tio  300  BOO  laoo 
OCTAVE  PASS  BANDS.  CPS 


3400  4B00 


•NO  1»N0 
SIL 


FIgun  C‘2  Mtximm  Cockpit  Nol$0  Lwdt  During  Vtrlout  Flight  Op§r§tlont  For 
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APPENDIX  D 

TABULAllONS  OF  FUNCTIONAL  DISTRIBUTION  OF  ALERTS  ON  EACH  BASIC 

TYPE  OF  AIRCRAFT 
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Table  D-2  Functional  Distribution  of  Warnlng/Cautlon/Advltory  Alerts  For  727 Aircraft 
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Tabl9  D-4  Functional  Distribution  of  Wsmlng/Ctutlon/Advlsory  Alerts  For  747 Aircraft 


WARNINOI 


CAUTION! 


AOVIIORV/ITATU! 


■VITIM 

CLAHIIICATIONi 


AIR  CONDITION  INQ 


AIRCRAFT  OINIRAL 


AITITUOI  ALIRT  IVITIM 


HID  MO  RID 

U0H1  HAD  UNO  YIUOW 

IIOHT 


COMMUNICATION! 


ILICTRICAU 


IMIROINCV  IQUIRMINT 


RIRI  RROTICTION 


RUCHT  CONTROL! 


RLIOHT  INITRUMINTATION 
AND  AIR  DATA 


NVORAULIC 


1C!  AND  RAIN  RROTICTION 


4F  10 


IHII 

a I 

I 


LANDINQ  0!AR  AND  BRAK!! 


NAVIOATION 


PNEUMATIC! 


POWER  PLANT 


WIIOHT  AND  EALANCE 


4Pf4  20 


AMUR/  ORIIN  ILUl  WHI1I  ORIIN  QRIIN  WHITI 

YILLOW  IIONT  IIDHT  LIOHT  lAND  HAD  FlAO 

lANU 


7 lP+2 


IB  17 


! 


13  ie 


NOTE  I IP  dpnotM  Milhln(llght. 

B lligi  ind  12  llghli  of  unctfllnid 
niiurt  not  includfd  in  Mitlnj  «bovt. 


Table  0-5  Functional  Distribution  of  Warning/Caution/Advlsory  Alerts  for  DC-8  Aircraft 
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Tabb  D-6  Functional  Distribution  of  Waming/Caution/Advitory  Alartt  For  DC-9  Aircraft 
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Table  D-7  Functional  Distribution  of  Warning/Caution/Advisory  Alerts  for  DC‘  10  Aircraft 
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Tabit  D~9  Functional  DIttrlbution  of  WcrnIng/Caut/on/AdvIaory  Alerts  for  RAC- 1 1 1 Aircraft 
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TABLE  E4 

ALERTING  SYSTEM  REQUIREMENlt'S  FOONO  IN  ARP  450 


2.  FLIGHT  DECK  SIONALS 

2.1  GENERAL  FHILOSOPHYi  AIRCRAFT  FLIGHT  DECK  SIGNAL  SYSTEMS  MA  Y CONSIST  O'.'  ONE  OR  MORE  OF 
THE  SIGNALS  HEREIN  DEFINED, 

INSOFAR  AS  IS  TECHNICALLY  FEASIBLE,  IT  IS  DESIRABLE  TO  PREVENT  WARNING  OR  CAUTION  SIG- 
NALS FROM  EXISTING  OR  OCCURRING  WHEN  NOT  APPLICABLE  IN  VIEW  OF  THE  BASIC  INTENT  OR 
DESIGN  AIM  OF  THE  SIGNAL  SYSTEM.  THIS  OESION  PHILOSOPHY  IS  DESIRABLE  IN  ORDER  TO  PREVENT 
A BUILD-UP  OF  FLIGHT  CREW  TOLERANCE  AND  DISREGARD  FOR  THE  SIGNAL. 

IF  THE  PRIME  FUNCTION  0^  A MASTER  VISUAL  SIGNAL,  OR  OF  ONE  OF  THE  VISUAL  SIGNALS  IN  AN 
ANNUNCIATOR  PANEL,  IS  TO  DIRECT  ATTENTION  TO  AN  INDICATOR  OR  CONTROL  DEVICE,  IT  SHALL 
SUPPLEMENT  A SEPARATE  VISUAL  SIGNAL  AT  THAT  LOCATION.  THE  INDIVIDUAL  VISUAL  SIGNALS 
USED  WITH  MASTER  WARNING  SIGNALS,  MASTER  CAUTION  SIGNALS  OR  ANNUNCIATOR  PANELS, 
SHOULDBE  IDENTIFIED  WITH  TRANSILLUMINATED  NOMENCLATURE. 

SIGNALS  SHOULD  BE  OF  LIMITED  INTENSITY  SO  THAT  ATTENTION  IS  NOT  DRAWN  MORE  TO  THE  NOISE 
OR  LIGHT  THAN  IT  IS  TO  THE  SITUATION  WHICH  IS  CAUSING  THE  SIGNAL.  OVERWHELMING  SIGNALS 
SHOULD  BE  AVOIDED  SINCE  THEY  INTERFERE  WITH  CREW  COORDINATION  AND  COMMUNICATION  AND 
MAY  ALARM  A CREW  MEMBER  ENOUGH  TO  REDUCE  HIS  EFFICIENCY  IN  AN  EMERGENCY  SITUATION. 

2.1.1  VISUAL  SIGNALS:  MAY  CONSIST  OF  LIGHTS  (WITH  OR  WITHOUT  TRANSILLUMINATED  NOMENCLATURE), 
WARNING  FLAGS  OR  INDICATORS,  OR,  IN  THE  CASE  OP  INSTRUMENT  INDICATIONS,  IN  THE  TOTAL 
REMOVAL  OP  THE  PERTINENT  INSTRUMENT  DISPLAY. 

2.1.1.1  MASTER  WARNING  LIOHT(S):  A MASTER  WARNING  LIGHT  IS  A LIGHT  WHICH  IS  USED  WHERE  WARNING 
LIGHTS  ARE  LOCATED  OUTSIDE  OF  THE  DIRECT  VISION  OF  EITHER  PLOT. 

NOTE:  A MASTER  WARNING  LIGHT  OR  LIGHTS  MAY  BE  REQUIRED  BECAUSE  OF  THE  LIMITATIONS 

OF  VISIBILITY  OF  COLORED  LIGHTS  AND  THE  VARIABILITY  OF  LIGHTING  CONDITIONS  IN 
THE  FLIGHT  DECK. 

2.1.1.2  WARNING  LIGHTS:  LIGHTS  PROVIDED  TO  WARN  THE  CREWMEMBER,  OR  THE  CREW,  OF  A CONDITION 
WHICH  REQUIRES  IMMEDIATE  PROTECTIVE  OR  CORRECTIVE  ACTION. 

2.1.1.3  MASTER  CAUTION  LIGHT(S):  A MASTER  CAUTION  LIGHT  IS  A LIGHT  WHICH  IS  USED  WHERE  CAUTION 
LIGHTS  ARE  LOCATED  OUTSIDE  OF  THE  NORMAL  FIELD  OF  VISION  OF  EITHER  PILOT. 

2.1. 1.4  CAUTION  LIGHTS:  LIGHTS  PROVIDED  TO  INDICATE  MALFUNCTIONS  WHICH  DO  NOT  REQUIRE  IMME- 
DIATE ACTION,  BUT  WHICH  MAY  HAVE  A SUBSEQUENT  SIGNIFICANT  EFFECT  ON  THE  OPERATION  OF 
THE  AIRCRAFT, 

2.1.1.5  ADVISORY  LIGHTS:  LIGHTS  PROVIDED  TO  INDICATE  SAFE  OR  NORMAL  CONFIGURATION,  CONDITION 
OF  PERFORMANCE,  OPERATION  OF  ESSENTIAL  EQUIPMENT,  OR  FOR  ATTRACTING  ATTENTION  FOR 
ROUTINE  PURPOSES. 

2,1,1,7  WARNING  FLAGS  OR  INDICATORS;  MECHANICALLY  OR  ELECTRICALLY  ACTUATED  DISPLAYS  USED  TO 
WARN  OF  AN  UNSAFE  SETTING  OR  MALFUNCTION  OF  INSTRUMENTS  OR  MECHANICAL  DEVICES, 

2.1.2  AUDIBLE  SIGNALS:  IF  ONE  AUDIBLE  SIGNAL  IS  USED  FOR  MORE  THAN  ONE  FUNCTION,  IT  SHALL  BE 
ACCOMPANIED  BY  VISUAL  SIGNALS  WHICH  WILL  INDICATE  THE  MALFUNCTION  WHICH  IS  CAUSING  THE 
AUDIBLE  SIGNAL. 

2.1.2.1  WARNING  BELL;  A BELL  WHICH  OPERATES  IN  CONJUNCTION  WITH  A WARNING  LIGHT  ONLY  TO  INDI- 
CATE THE  EXISTENCE  OF  A FIRE, 

2. 1.2. 2 WARNING  HORN;  A HORN  WHICH  OPERATES  TO  INDICATE  AN  UNSAFE  CONITGURATION. 
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3. 1.2.3  WARNING  GONG:  A SINGLE  BEAT  SOUND  USED  TO  WARN  OF  AN  UNSAFE  PLIGHT  CONDITION  OR 
INDICATION. 

3.1 .2.4  WARNING  “CRICKET":  A DEVICE  WHICH  GENERATES  A CRICKET-LIKE  SOUND  TO  WARN  OF  SPEEDS  IN 
EXCESS  OF  Vmo-Mmo. 

3.1.3.3  CHIMES:  USED  IN  CONJUNCTION  WITH  COMMUNICATION  SYSTEMS  OF  THE  AIRCRAFT.  FOR  EXAMPLE; 
CABIN  10-flight  DECK:  8ELCAL,  ETC. 

2.1.2.6  TONE:  AN  800>CYCLE  THREE-NOTE  CORD  OF  INCREASING  AMPLITUDE  USED  TO  INDICATE  APPROACH- 
ING THE  DECISION  HEIGHT  AND  CUTTING  OFF  WHEN  REACHING  DECISION  HEIGHT. 

2.1.3.1  ST1CK4HAKER:  A DEVICE  WHICH  CAUSED  THE  PILOT'S  CONTROL  WHEEL  TO  VIBRATE  TO  WARN  OP 
APPROACHING  TO,  OR  OF  OPERATION  IN,  A STALLED  CONDITION. 

3.1.3.2  FOOT-THUMPER:'  A DEVICE  WHICH  VIBRATES  THE  PILOTS  FOOT  ON  THE  BRAKE  PEDAL  TO  INDICATE 
THE  CYCLING  OP  THE  ANTI-SKID  SYSTEM,  OR  TO  WARN  OF  WHEEL  SKIDDING’ 

2.2.U  STEADY  MASTER  WARNING  LIGHT:  THE  STEADY  MASTER  WARNING  LIGHT  SHALL  BE  USED  EXCLU- 
SIVELY TO  WARN  OF  FIRE  AND  WILL  BE  ACCOMPANIED  BY  THE  WARNING  BELL. 

2.3.1.2  FLASHING  MASTER  WARNING  LIGHT:  THE  PLASHING  MASTER  WARNING  LIGHT  SHALL  BE  USED  TO 
INDICATE  AN  UNSAFE  CONDITION  OTHER  THAN  FIRE. 

3.3.1.3  LOCATION:  THE  MASTER  WARNING  LIGHT,  OR  LIOHH,  AND  THE  MASTER  CAUTION  LIGHT,  WILL  BE 
LOCATED  NEAR  THE  CENTER  LINE  OP  THE  AIRCRAFT  NEAR  THE  TOP  OP  THE  CENTER  INSTRUMENT 
PANEL. 

3.3.3.I  WARNING,  CAUTION  AND  ADVISORY  LIGHTS:  AN  INDEPENDENT  LIGHT  SYSTEM  SHALL  BE  PROVIDED 
FOR  BACH  INDIVIDUAL  FUNCTION  OR  SYSTEM  TO  BE  MONITORED.  WHERE  A MASTER  WARNING  LIGHT 
IS  REQUIRED,  IT  WILL  SUPPLEMENT  A SPECIFIC  STEADY  WARNING  LIGHT  AT  THE  INDICATOR  OR  CON- 
TROL OF  THE  AREA  OR  EQUIPMENT  AFFECTED. 

3.2.3.3  WARNING  LIGHTS  SHALL  BE  WITHIN  THE  CONTROL  DEVICE,  OR  SHALL  BE  LOCATED  IN  CLOSE  PROX- 
IMITY TO  THE  INDICATOR  OR  CONTROL  DEVICE,  WHERE  ATTENTION  TO  THE  INDICATOR  OR  CONTROL 
DEVICE  IS  THE  PRIME  FUNCTION  OP  THE  WARNING  SIGNAL. 

2.2.2.4  THE  WARNING  LIGHTS  FOR  THE  FOLLOWING  SPECIFIC  INDICATORS  OR  CONTROL  DEVICES  WILL  BE 
LOCATED  IN  THE  INDICATOR  OR  CONTROL  DEVICE.  OR  ON  THE  CONTROL  PANEL  IMMEDIATELY  ADJA- 
CENT THERE  TO  IN  SUCH  A MANNER  AS  TO  POSITIVELY  IDENTIFY  THE  INDICATOR  OR  CONTROL 
REQUIRING  ACTION. 

A.  LANDING  GEAR 

B.  FIRE  CONTROL 

3.2.3  3 CAUTION  AND  ADVISORY  LIGHTS  SHALL  BE  LOCATED  IN  CLOSE  PROXIMITY  TO  THE  INDICATOR  OR 
CONTROL  DEVICE  WHERE  ATTENTION  TO  THE  INDICATOR  OR  CONTROL  DEVICE  IS  THE  PRIME  FUNC- 
TION OF  THE  SIGNAL. 

2.2.5  SIGNAL  FLACS-WARNING  AND  ADVISORY:  SIGNAL  FLAGS  MAY  BE  USED  WHERE  SPECIFIC  INDICATION 
IS  ASSOCIATED  WITH  AN  INSTRUMENT  OR  MECHANICAL  DEVICE.  WHERE  THEY  ARE  SO  USED  THE  FLAG 
SIGNAL  WILL  BE  AN  INTEGRAL  PART  OF  THE  INSTRUMENT  OR  DEVICE. 

2.3.6  AUDIBLE  SIGNALS:  AUDIBLE  SIGNALS  ARE  REQUIRED  FOR  ALL  FIRE  WARNING  SYSTEMS  AND  OTHER 
CRITICAL  SYSTEMS  OR  DEVICES  WHERE  VISUAL  CHECKS  OR  WARNING  MAY  BE  INSUFFICIENT  TO 
GUARANTEE  SAFETY,  THEY  MAY  ALSO  BE  USED  FOR  OTHER  FUNCTIONS  NOT  BEARING  ON  SAFETY 
BUT  OF  SUl'TiCIF.NT  IMPORTANCE  TO  REQUIRE  THEIR  USE. 
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2.2.7  TACTUAL  SIGNALS:  TACTUAL  SIGNALS  MAY  BE  EMPLOYED  TO  ALERT  PILOTS'  ATTENTION  WHERE 
VISUAL  CHECK  OR  NORMAL  SENSATIONS  MAY  BE  INSUFFICIENT  TO  GUARANTEE  SAFETY'  THEY  MAY 
ALSO  BE  USED  FOR  OTHER  FUNCTIONS  NOT  BEARING  ON  SAFETY,  BUT  OF  SUFFICIENT  IMPORTANCE 
TO  REQUIRE  THEIR  USE. 

2.2.8  VOICE  WARNING  SYSTEMS:  A SYSTEM  THAT  INDICATES  TO  THE  FLIGHT  CREW  BY  MEANS  OF  SPOKEN 
WORDS,  A SAFETY  FLIGHT  MALFUNCTION  OR  ABNORMALITY. 

2.2. B.1  WHEN  A VOICE  WARNING  SYSTEM  IS  USED,  IT  MAY  INCLUDE,  BUT  NOT  BE  LIMITED  TO,  ALL  WARNINGS 

REQUIRING  AN  AUDIBLE  SIGNAL  AND  SHALL  INDICATE  THE  SPECIFIC  ITEM  CAUSING  THE  UNSAFE 
CONDITION. 

2.2.5.2  THE  WARNING  MAY  INCLUDE  AN  APPROPRIATE  SIGNAL  CORRESPONDINO  TO  THE  SPECIFIC  ABNOR* 
MALITY  AND  SHALL  OCCUR  ALTERNATELY  WITH  THE  VOICE  SIGNAL. 

2.2. 8.3  AN  ANNUNCIATOR  PANEL  SHALL  BE  INCLUDED  IN  THE  SYSTEM  TO  INDICATE  ABNORMAL  CONDITIONS 
AS  LONG  AS  THEY  EXIST,  IF  A CANCELLABLE  AURAL  SIGNAL  IS  EMPLOYED. 

2.2. B.4  A SILENCE  SWITCH  SHALL  BE  PROVIDED  TO  SILENCE  THE  AURAL  SIGNALS  ONLY  AFTER  THEY  HAVE 

COMPLETED  ONE  CYCLE  AND  WILL  RESET  THE  SYSTEM.  NONCANCELLABLE  TAKE4)FF  AND  LANDING 
WARNINGS  CANNOT  BE  SILENCED. 

2.2.8.S  THE  VOICE  WARNING  SYSTEM  WILL  USE  SEPARATE  COCKPIT  SPEAKERS  AND  THE  COCKPIT  INTERPHONE 
TO  DISSEMINATE  INFORMATION. 

2.3.2  COLOR  CODE-LIGHTS: 

2.3.1  WARNING  LIGHTS:  WARNING  LIGHTS  WILL  BE  COLORED  AVIATION  RED.  THE  COLOR  IS  DEFINED  IN 
SPECIFICATION  ANC*S6.2,  SECTION  D-OENERAL  REQUIREMENTS. 

2.3  CAUTION  LIGHTS:  SHALL  BE  AMBER,  AS  DEFINED  IN  AN>C-S64,  SECTION  D. 

2.3.3  ADVISORY  LIGHTS:  MAY  BE  GREEN,  BLUE,  OR  WHITE.  AS  DEFINED  IN  AN<C>S6>2,  SECTION  D. 

2,^.3.1  GREEN:  USED  TO  INDICATE  A SAFE  CONFIGURATION  OR  CONDITION,  WHEN  USED  IN  CONJUNCTION 

WITH  A WARNING  LIGHT  THE  GREEN  LIGHT  WILL  INDICATE  THAT  THE  ACTION  TAKEN  HAS  RESULTED 
IN  COMPLETE  SYSTEM  OPERATION  AND  THE  RESULTING  CONFIGURATION  IS  SAFE. 

2.3. 3.2  BLUE;  USED  TO  INDICATE  THAT  A SYSTEM  IS  ON  AND  OPERATING  NORMALLY,  OR  THAT  TRANSITORY 
ACTION  IS  TAKING  PLACE  (WITH  THE  EXCEPTION  OF  THE  LANDING  GEAR  WARNING  SYSTEM). 

2.4.1. 1 MASTER  WARNING  LIGHTS:  THE  INTENSITY  OF  THE  MASTER  WARNING,  MASTER  CAUTION  AND 
WARNING  LIGHTS  WILL  BE  27S  MILLILAMBERTS  FOR  THE  BRIGHT  INTENSITY,  AND  140  MILLILAMBERTS 
IF  DIMMING  IS  USED. 

2.4.1.4  CAUTION  LIGHTS:  THE  INTENSITY  OF  CAUTION  AND  ADVISORY  LIGHTS  WILL  BE  27S  MILLILAMBERTS 

FOR  THE  BRIGHT  INTENSITY  AND  CAPABLE  OF  DIMMING  TO  NOT  LESS  THAN  2S  MILLILAMBERTS.  IF 
CAUTION  LIGHTS  ARE  LOCATED  NEAR  THE  PRINCIPAL  FLIGHT  INSTRUMENTS  THEY  SHOULD  DIM  SO 
AS  NOT  TO  INTERFERE  WITH  READING  THE  INSTRUMENTS  DURING  NIGHT  FLIGHT  WITH  THE  INSTRU- 
MENT LIGHTS  TURNED  DOWN, 

2.6.1  WARNING  LIGHTS:  WARNING,  CAUTION  AND  ADVISORY  LIGHTS  WILL  ILLUMINATE  WHEN  THE  CONDI- 
TION  TO  BE  WARNED  REMAINS  ILLUMINATED  UNTIL  ITS  CAP  IS  PUSHED  IN,  OR  UNTIL  THE  CONDITION 
IS  CORRECTED,  EITHER  OF  WHICH  EXTINGUISHES  THE  MASTER  WARNING  AND  RESETS  IT  FOR  OTHER 
POSSIBLE  FAILURES. 

2.6.2  WARNING  LIGHTS:  WARNING  CAUTION  AND  ADVISORY  LIGHTS  WILL  ILLUMINATE  WHEN  THE  CONDI- 
TION TO  Br:  WARNED  OR  ADVISED  OF  OCCURS.  THESE  LIGHTS  WILL  REMAIN  ON  AS  LONG  AS  THE  CON- 
DITION EXISTS  OR  UNTIL  THE  SYSTEM  IS  DEACTIVATED. 
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3.6.3  MASTER  CAUTION  LIGHT:  WILL  ILLUMINATE  WHEN  THE  CONDITION  TO  BE  ADVISED  OP  OCCURS.  THE 
MASTER  CAUTION  SIGNAL  REMAINS  ILLUMINATED  UNTIL  ITS  CAP  IS  PUSHED  IN  OR  UNTIL  THE  CONDI- 
TION IS  CORRECTED.  EITHER  OP  WHICH  EXTINGUISHES  THE  MASTER  CAUTION  SIGNAL  AND  RESETS 
IT  FOR  OTHER  POSSIBLE  ABNORMALITIES. 

3.7.1  COLOR  CODE:  WHERE  WARNING  FLAGS  ARE  USED  EXTERNALLY  OR  INDEPENDENTLY  PROM  INSTRU- 
MENTATION, THEY  SHOULD  BE  OF  A BRIGHT  YELLOW  WITH  BLACK  DIAGONALS  TO  PROVIDE  CON- 
TRAST TO  THE  SURROUNDING  AREA. 

WHERE  WARNING  FLAG  INDICATORS  ARE  USED  INTERNALLY  IN  INSTRUMENTS,  THE  COLOR  SHOULD 
BE  YELLOW,  OR  FLUORESCENT  RED,  WITH  BLACK  WORDING  THEREON,  IF  REQUIRED. 

3.7.3  WARNING  FLAG  OR  INDICATORS  INDEPENDENT  FROM  INSTRUMENT)  FLAGS  USED  IN  CONJUNCTION 
WITH  MECHANICAL  DEVICES  INDEPENDENT  OP  INSTRUMENTATION  WILL  PROVIDE  A CLEAR,  UNMIS- 
TAKABLE WARNING  THAT  THE  CONDITION  TO  BE  WARNED  OF  HAS  OCCURRED, 

3.7.3  INSTRUMENT  WARNING  FLAGS  OR  INDICATORS:  FLAGS  USED  IN  CONJUNCTION  WITH  INSTRUMENTS 
WILL  PROVIDE  A CLEAR,  UNMISTAKABLE  WARNING  THAT  THE  CONDITION  TO  BE  WARNED  OF  HAS 
OCCURRED, 

3.8  AUDIBLE  SIGNAL-CODE: 

3.8.1  BELL:  INDICATES  “FIRE,"  FUNCTIONS  AUTOMATICALLY  AND  SIMULTANEOUSLY  WITH  A FIRE 
WARNING  LIGHT. 

3.8.3  HORN:  INDICATES  AN  UNSAFE  AIRCRAFT  CONFIGURATION. 

SPECIFIC  APPLICATIONS; 

A.  LANDING  GEAR  UNSAFE  WITH  THROTTLES  RETARDED,  OR  WITH  WING  FUPS  IN  THE 
LANDING  CONFIGURATION,  STEADY  SOUND. 

B.  UNSAFE  TAKEOFF  CONFIGURATION  UPON  THROTTLE  OPENING  INTERMITTENT  SOUND. 

C.  CABIN  PRESSURE  ABOVE  10,000  FEET  INTERMITTENT  BOUND. 

3.8.3  “CRICKET";  INDICATES  SPEED  IN  EXCESS  OP  V,^q  -M^q. 

3.8.4  GONG:  USED  FOR  ALTITUDE  ALERTING  SYSTEM  AND  SPECIFIC  WARNING  ASSOCIATED  WITH  FLIGHT 
INFORMATION. 

3.8.3  CHIME;  USED  FOR  ROUTINE  OPERATIONAL  INFORMATION. 

3.8.6  TONE:  AN  800  CYCLE  THREE  NOTE  CORD  OP  INCREASING  AMPLITUDE  MADE  UP  OF  THE  FOLLOWING 
FREQUENCIES:  313/640/768  Hz. 

3.9  AUDIBLE  SIGNAL  SOUND  LEVEL;  THE  LEVEL  OF  SOUND  FOR  ALL  AURAL  SIGNALS  SHOULD  BE  THE 
MINIMUM  LEVEL  WHICH  WILL  BE  CLEARLY  DISTINGUISHABLE  ABOVE  THE  NOISE  LEVEL  OF  THE 
FLIGHT  DECK  FOR  ALL  CONDITIONS  OF  FLIGHT  OPERATIONS  OVER  THE  ENTIRE  DESIGN  ENVELOPE. 

3.10  AUDIBLE  SIGNALS  TESTING;  MEANS  SHALL  BE  PROVIDED  IN  THE  FLIGHT  DECK  AREA  FOR  TESTING 
AUDIBLE  SIGNALS. 

3.11  OPERATION  OF  AUDIBLE  SIGNALS;  THE  AUDIBLE  SIGNAU  WILL  SOUND  WHEN  THE  CONDITION  TO  BE 
WARNED  OF  EXISTS. 

3.11.1  BELL: 

A.  THE  WARNING  BELL  SHALL  HAVE  A PROVISION  FOR  CUT-OFF.  IP  CITPOPP  IS  AUTOMATIC, 
THE  BELL  WILL  RING  NOT  LESS  THAN  ONE  OR  MORE  THAN  THREE  SECONDS. 
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B.  THE  CUT*OFP  WILL  NOT  AFFECT  CONTINUED  OPERATION  OF  THE  SIGNAL  LIGHT. 

C,  THE  CUT-OFF  WILL  AUTOMATICALLY  RESET  THE  WARNING  BELL  FOR  RECURRING  FIRE  IN 
THE  SAME  SYSTEM,  OR  FOR  OCCURRENCE  OF  FIRE  IN  ANY  OTHER  SYSTEM,  FOR  EITHER 
MANUAL  OR  AUTOMATIC  CUT-OFF. 

2.1 1.2  HORN:  THE  WARNING  HORN  SHALL  BE  PROVIDED  WITH  A MANUAL  CUT-OFF  SWITCH.  IT  SHALL  NOT  BE 
POSSIBLE,  HOWEVER,  TO  SILENCE  THE  HORN  WITH  THE  CUT-OFF  SWITCH: 

A,  DURING  TAKEOFF,  EXCEPT  BY  CORRECTING  THE  UNSAFE  TAKEOFF  CONDITION. 

B.  IN  FLIGHT  WHEN  THE  WING  FLAPS  ARE  IN  THE  LANDING  CONFIGURATION. 

IF  THE  HORN  SOUNDS  IN  FLIGHT  AS  A RESULT  OP  RETARDING  THROTTLES  AND  THE  HORN  IS  THEN 
SILENCED  WITH  THE  CUTOFF  SWITCH,  THE  WARNING  SYSTEM  SHALL  AUTOMATICALLY  RESET  FOR 
OPERATION  UPON  ADVANCEMENT  OF  THROTTLES. 

2.11.3  "CRICKET":  WILL  BE  FULLY  AUTOMATIC  IN  OPERATION  WITH  NO  CUTOFF  PROVIDED. 

2.11.4  GONG:  WILL  BE  FULLY  AUTOMATIC  IN  OPERATION  WITH  NO  CUT-OFF  PROVIDED. 

2.11.5  CHIME:  WILL  BE  SOUNDED  BY  AN  ACTUATING  SWITCH  OR  BUTTON,  AS  REQUIRED. 

2.12  TACTUAL  SIGNALS  PERCEPTIBILITY:  THE  INTENSITY  OF  TACTICAL  SIGNALS  SHALL  BE  SUCH  AS  TO 
ASSURE.  THEIR  PERCEPTIBILITY  UNDER  ALL  CONDITIONS. 

2.13  TACTUAL  SIGNALS  TESTING:  MEANS  SHALL  BE  PROVIDED  IN  THE  FLIGHT  DECK  AREA  FOR  TESTING 
TACTUAL  SIGNALS. 

2.14  OPERATION  OF  TACTUAL  SIGNALS:  THE  TACTUAL  SIGNALS  WILL  BE  ACTIVATED  WHEN  THE  CONDITION 
TO  BE  WARNED  OF  EXISTS,  OR  IMPENDS,  AND  WILL  PERSIST  UNTIL  THE  CONDITION  IS  CORRECTED, 

WHEN  THE  CONDITION  IS  CORRECTED  THE  TACTUAL  SIGNAL  WILL  BE  AUTOMATICALLY  DEACTIVATED 
AND  RESET  FOR  FUTURE  RECURRENCE. 
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3.2.2  SELCALi  A 8YSTIM  MAY  BE  INSTALLED  FOR  PROVIDING  VISUAL  AND  AURAL  INDICATION  OF  A RADIO 
CALL  INfSNDED'FOR  THAT  PARTICULAR  AIRCRAFT. 

3.2.2.1  VISUAL  «a>IOAHlON  SHALL  BE  PROVIDED  FOR  L/vCH  RECEIVER  FOR  WHICH  THE  CALLING  SYSTEM  IS 
PROVHMO,  BY  AN  ADVISORY  LIGHT  (OF  A COLOR  CONFORMING  TO  ARP  430).  EACH  LIGHT  SHALL  BE 
LOCATED  AS  CLOSE  AS  PRACTICAL  TO  THE  RESPECTIVE  RECEIVER'S  FREQUENCY  SELEaOR  AND/OR 
VOLUMKCCWTftOL. 

3.1.1  THE  PLIGHT  <Dl>RECTOR,  AUTOPILOT,  AND  AUTOTHROTTLE  SYSTEM  MODE  ANNUNCIATION  DISPLAY 
SHALL.PROVIDE  A VISUAL  INDICATION  OF  THE  ARMING  AND  ENGAGEMENT  OF  ALL  SELECTED  MODES) 
AND,:POR  SPECIFIED  CASES,  A VISUAL  AND  AURAL  WARNING  OF  DISCONNECT  CAUSED  BY  A SYSTEM 
flAUta-  OR  BY  PILOT  ACTION. 

3.1.3  THE  MODE  ANNUNCIATION  DISPLAY  SHALL  BE  LOCATED  ON  EACH  PILOT'S  PLIGHT  INSTRUMENT 
PANEL  WITHIN  THE  AREA  OP  THE  "BASIC  T"  LAYOUT,  PREFERABLY  CENTRALLY  ABOVE  EACH  ATTI. 
TUDE  DIRECTOR  INDICATOR  (ADI). 

S.S  MARKER  EQUIPMENT  INDICATION!  A SET  OF  MARKER  LIGHTS  SHALL  BE  PROVIDED  FOR  THE  CAPTAIN; 

IT  IS  CONSIDERED  DESIRABLE  TO  ALSO  PROVIDE  A SET  FOR  THE  CO-PILOT. 


5.S.I  THE  MARKER  LIGHTS  SHALL  BE  POSITIONED  AT  THE  RIGHT  END  OF  THE  TOP  ROW  OF  FLIGHT  INSTRU- 
MENTS AND  SHALL  BE  FURTHER  ARRANGED  VERTICALLY  AS  FOLLOWS)  UPPERMOST,  WHITE-3000 
CYCLE)  MIDDLE,  AMBER-1300  CYCLE)  BOTTOM.  BLUE-400  CYCLE.  THE  COLOR  OP  THE  AMBER  AND  THE 
BLUE  LIGHTS  SHALL  BE  AS  DEFINED  IN  ANC-S6-2,  SECTION  P. 
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5.3  I AIU'RE  WARNINGS:  FAILURE  WARNINGS  FOR  THE  VARIOUS  FUNCTIONS  SHALL  BE  PROVIDED  FOR 
THE  PRIMARY  FLIGHT  PATH  CONTROL  INSTRUMENT  SYSTEMS  WHERE  OTHER  MEANS  ARE  NOT  AVAIL- 
ABLE FOR  THE  CREW  TO  IMMEDIATELY  DETERMINE  A FAILURE. 

5.3.1  INDIVIDUAL  FAILURE  WARNING  SHALL  BE  PROVIDED  FOR  EACH  INSTRUMENT  FUNCTION  WHICH  IS 
ESSENTIAL  FOR  CONTINUATION  OF  FLIGHT  UNDER  ANY  OPERATION  CONDITION, 

5.3.3  FAILURE  WARNINGS  SHALL  COVER  MECHANICAL  AND  ELECTRICAL  MALFUNCTIONS  AS  WELL  AS 
POWER  FAILURES,  POWER  FAILURE  IS  CONSIDERED  AS  ANY  TYPE  OF  POWER  DISCREPANCY  WHICH 
WILL  RESULT  IN  A MALFUNCTION  OF  THE  DISPLAY. 

3.2.3  PREFERRED  METHOD  OF  FAILURE  WARNING  IS  TO  REMOVE  THE  AFFECTED  DISPLAY  PROM  VIEW  OR 
OTHERWISE  PREVENT  INADVERTENT  USE  OF  THE  FAILED  DISPLAY, 

3.2.4  WHEN  A WARNING  FLAG  IS  USED,  IF  PRACTICAL,  IT  SHOULD  OBSCURE  THE  FUNCTION  INDICATOR  FOR 
WHICH  THE  WARNING  IS  PERTINENT, 

3.3.1.2  THE  AIRSPEED  SYSTEMS  SHALL  INCORPORATE  A WARNING  FEATURE  FOR  SIGNIFICANT  DISCREPANCIES 
IN  EITHER  OF  THE  SYSTEMS,  INCLUDING  THE  INSTRUMENT  READOUT, 

3. 3.2.6  THE  VSI  DISPLAY  SHALL  PROVIDE  WARNING  OF  SIGNIFICANT  DIFFERENCES  IN  SYSTEMS  OUTPUT. 

3.3.2.11  THE  FLIGHT  DIRECTOR  COMPUTER  FAILURE  WARNING  SHALL  RE  ACTIVATED  BY  FAILURE  IN  THE 

COMPUTER  AND  SHALL  ALSO  INDICATE  FAILURES  THAT  HAVE  OCCURRED  IN  ANY  OF  THE  INPUTS  TO 
THE  COMPUTER  THAT  ARE  BEING  MONITORED. 

3.3.3.1  A VISUAL  ADVISORY  SIGNAL  SHALL  BE  PROVIDED  TO  ALERT  THE  CREW  WHEN  THE  ASSIGNED  ALTI- 
TUDE IS  BEING  APPROACHED  OR  VACATED. 

3.3.3.3  THE  RADIO  ALTIMETERS  SHALL  INCORPORATE  AN  AURAL  AND  VISUAL  WARNING  OR  ALERT  SIGNAL 
AT  DESlONATliD  ALTITUDES  ABOVE  THE  TERRAIN,  THIS  ALERT  SIGNAL  SHALL  BE  SEPARATE  AND  DIS- 
TINCT EROM  THE,  SIGNAL  IN  PARAGRAPH  3.3.3.I,  SEE  ARP  430B  FOR  DESIGN  CRITERIA  OF  THESE  WARN- 
ING SIGNALS, 

.3, 3. 3.4  A WARNING  SYSTI'.M  SHALL  WARN  THE  PILOT  (VISUAL  SIGNAL)  WHEN  A SIGNIFICANT  DISCREPANCY 

EXISTS  IN  EITIII'R  OF  THE  TWO  BAROMETRIC  DISPLAYS,  THIS  ALSO  SHALL  APPLY  TO  THE  RADAR  ALTl- 
MI  TER  DISPLAYS, 

5.3.4. 2 A WARNING  SHALL  BE  PROVIDED  TO  INDICATE  SIGNIFICANT  DLSCREPANCiES  IN  THE  HBl  SYSTEMS, 

3. 3.3. 2 WARNING,  AUDIO  AND  VISUAL  SIGNALS  SHALL  AUGMENT  THE  DISPLAY  IN3.3,3,I  ABOVE. 

3. 3.3. 3 IT  IS  ni'SIRAUlE  THAT  A RATE  OE  APPROACH  TOWARD  AN  OPERATIONAL  SITUATION  OP  LIMIT  ALSO 
BE  DISPLAYED  AND  WHERE  NECESS  ARY  SUITABLE  WARNINGS  BE  PROVIDED, 
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3.S.2.2  BUCK  BACKQROUNDSi 

S.5.2.2.1  NONTRANSIUUMINATED  SYSTEMS:  THE  BRIGHTNESS  OF  THE  BUCK  BACKGROUND  SHALL  HAVE  A 
MAXIMUM  VALUE  OF  7%  OF  THE  BRIGHTNESS  OF  NEARBY  WHITE  MARKINGS  (WITHIN  AN  APPROXIMATE 
0.2S  IN. (6 .33  MM)  RADIUS),  AND  WHEREVER  PRACTICAL  NO  LIGHT  SHALL  BE  EMITTED  FROM  THE  BLACK 
BACKGROUND. 


TABLE  I - DISPLAY  COLORS 

VM -Tyi»l9AL 

S&L2& 

COLOR  DESCRIPTION* 

DISPLAY  MARKINGS: 


PRIMARY 

SECONDARY 

EXTRANEOUS 

FLAG 

WHITE 

BLUE 

BLACK 

BLACK 

37873 

33177 

27038 

37038 

BACKGROUNDS: 

DISPLAY 

BLACK 

37038 

DK.ORAY 

36118 

FLAG 

RED 

DAY-OLO  FIRE  ORANGE 

YELLOW 

DAYOLO  SATURN  YELLOW 

POINTERS,  LUBBER  LINES  A BUGS: 

PRIMARY 

WHITE 

37873 

SECONDARY 

ORANGE 

DAY-OLO  ARC  YELLOW 

RED 

DAY«LOFIRE  ORANGE 

NON-LIT  AREAS 

YELLOV 

DAY-GLO  SATURN  YELLOW 

BLACK 

37038 

LIMIT  MARKS; 

WARNING 

RED 

DAY-GLO  FIRE  ORANGE 

CAUTION 

YELLOW 

DAY-OLO  SATURN  YELLOW 

RANGE  BANDS: 

WHITE 

37878 

YELLOW 

DAY-OLO  SATURN  YELLOW 

GREEN 

DAY-GLO  SIGNAL  GREEN 

RED 

DAY-GLO  FIRE  ORANGE 

KNOBS; 

HANDLE 

LT.  GRAY 

36440 

SKIRT 

BLACK 

37038 

MARKINGS 

WHITE 

37873 

•1.  COLOR  NUMBERS  NOTED  IN  THIS  TABLE.  INCLUDING  THEIR  FINISH,  ARE  PER  FED^TD-395, 

2.  ALTHOUGH  THE  COLORS  IDENTIFIED  AS  DAY-GLO  SHALL  MATCH  IN  COLOR  THE  RESPECTIVE  COLORS 

OF  THE  DAYOLO  DAYLIGHT  FLUORESCENT  PAINTS  MADE  BY  THE  DAY-GLO  COLOR  DIVISION  OF 
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SWITZER  BROS,,  INC,,  CLEVELAND,  OHIO,  THEY  ARE  NOT  NECESSARILY  REQUIRED  TO  HAVE  THE 
FLUORESCENT  CHARACTERISTICS  OF  THOSE  PAINTS, 


8,  WARNING,  CAUTION,  AND  ADVISORY  SYSTEM  LIGHTING 

REFER  TO  THE  LATEST  ISSUE  OF  SAE  ARP  450  FOR  RECOMMENDATIONS  ON  WARNING,  CAUTION,  AND 
ADVISORY  LIGHTING,  AS  AN  OPTION,  SECTIONS  8.1  THROUGH  8.10  CAN  BE  OMITTED. 

8.1  PURPOSE:  THE  PURPOSE  OF  THIS  SECTION  IS  TO  PRESENT  THE  LIGHTING  REQUIREMENTS  FOR  WARN- 
ING, CAUTION,  AND  ADVISORY  SYSTEMS. 

8.2  SCOPE:  THIS  SECTION  SETS  FORTH  THE  LIGHTING  REQUIREMENTS  FOR  WARNING,  CAUTION,  AND 
ADVISORY  SYSTEMS. 

8.5  DEFINITIONS: 

8.3.1  MASTER  WARNING:  A SIGNAL  INDICATING  A CONDITION  REQUIRING  IMMEDIATE  ACTION.  THE  SPECI- 
FIC CONDITION  IS  SHOWN  BY  A SEPARATE  INDICATION, 

8.3.2  INDEPENDENT  WARNING:  A SIGNAL  INDICATING  A CONDITION  REQUIRING  IMMEDIATE  ACTION,  THE 
SPECIFIC  CONDITION  IS  DEFINED  BY  THE  LOCATION  OF  THE  SIGNAL  OR  THE  LEGEND  ASSOCIATED 
WITH  THE  SIGNAL. 

8.3.3  MASTER  CAUTION:  A SIGNAL  INDICATING  A CONDITION  WHICH  MAY  REQUIRE  ACTION.  THE  SPECIFIC 
CONDITION  IS  SHOWN  BY  A SEPARATE  INDICATION, 

8.3.4  ADVISORY,  SAFE:  A SIGNAL  INDICATING  A SAFE  CONDITION. 

8.3.5  ADVISORY,  STATUS:  A SIGNAL  INDICATING  A STATUS  CONDITION  ONLY,  NOT  NECESSARILY  A SAFE 
CONDITION. 

8.3.8  DEPENDENT  WARNING  OR  CAUTION:  A SIGNAL  INDICATING  THE  SPECIFIC  CAUSE  OF  ACTIVATION  OF 
THE  MASTER  WARNING  OR  CAUTION  SIGNALS,  RESPECTIVELY, 

8.4  COLORS: 

A.  WARNING  SIGNALS:  AVIATION  RED  PER  MU,-C.2S050. 

B.  CAUTION  SIGNALS:  AVIATION  YELLOW  PER  MIL-C-2S050. 

C.  ADVISORY,  SAFE;  LIGHT  GREEN  PER  DEVICE  SPECIFICATION, 

D.  ADVISORY,  STATUS;  ANY  COLOR  INCLUDING  WHITE  EXCEPT  THOSE  ABOVE  OR  COLORS  EASILY 
CONFUSED  WITH  THE  ABOVE  COLORS.  A LIGHT  (ICE)  BLUE  IS  RECOMMENDED. 

8.5  MASTER  WARNING  INDICATOR  AND  MASTER  CAUTION  INDICATOR;  THE  PURPOSE  OF  THESE  INDICA- 
TORS IS  TO  INTRUDE  UPON  THE  ATTENTION  OF  THE  CREW  MEMBERS  UNDER  ALL  OPERATING  CONDI- 
TIONS. THUS  THE  DESIGNER  MUST  CONSIDER  PLACEMENT  OF  INDICATOR,  AMBIENT  LIGHTING,  SHAD- 
ING PROM  DIRECT  SUNLIGHT,  SIZE  OF  LIT  AREA,  STEADY  STATE  VERSUS  PLASHING  AND  BRIGHTNESS. 
MINIMUM  BRIGHTNESS  SHALL  BE  150  FOOTLAMBERTS  AT  RATED  VOLTAGE  PROVIDED  THE  INDICA- 
TORS CAN  BE  PLACED  OUT  OF  DIRECT  SUNLIGHT.  THE  INDICATORS  SHALL  BE  DIMMABLE  TO  1 5 FOOT- 
LAMBERTS. THE  BRIGHT-DIM  CONTROL  SHALL  RETURN  TO  FULL  BRIGHT  POSITION  WHENEVER  POWER 
IS  REMOVED  FROM  THE  CONTROL  OR  THE  AMBIENT  BRIGHTNESS  REACHES  A PREDETERMINED  LEVEL, 
THE  INDICATORS  SHALL  BE  RESETTABl.E  SO  THAT  A SECOND  SIGNAL  SHALL  REACTIVATE  THE  MAS- 
TER INDICATOR, 

8.6  INDEPENDENT  WARNING  INDICATOR:  IN  GENERAL,  THE  INDEPENDENT  WARNING  INDICATOR  SHALL 
MEET  THE  REQUIREMENTS  OF  8,5  WITH  THE  FOLLOWING  EXCEPTIONS;  THE  INDICATOR  NEED  NOT  BE 
RESETTABLE;  EITHER  THE  PLACEMENT  OF  THE  INDICATOR  OR  AN  ASSOCIATED  LEGEND  SHALL 
CLEARLY  SHOW  THE  NATURE  OF  THE  WARNING:  THE  DESIGNER  SHALL  CONSIDER  ADDITIONAL  DIM- 
MING TO  5 FOOTLAMBERTS, 
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8.7  DEPENDENT  WARNING  AND  CAUTION  INDICATORS:  THESE  INDICATORS  SHALL  BE  ACTIVATED  SIMUL- 
TANEOUSLY WITH  THEIR  RESPECTIVE  MASTER  INDICATOR  AND  SHALL  SHOW  THE  SPECIFIC  CAUSE  OP 
THE  MASTER  INDICATOR  ACTIVATION.  IN  GENERAL,  THEIR  BRIGHTNESS  SHALL  BE  ISO  POOTLAMBERTS 
MINIMUM  AT  RATED  VOLTAGE  BUT  THE  REQUIRED  BRIGHTNESS  SHALL  BE  EVALUATED  IN  TERM  OF 
OPERATING  CONDITIONS  AND  LOWER  BRIGHTNESS  USED  WHERE  PRACTICABLE.  THE  INDICATORS 
SHALL  BE  DIMMABLE  TO  IS  POOTLAMBERTS  AND  THE  DESIGNER  SHALL  CONSIDER  DIMMING  TO 
VALUES  APPROXIMATELY  TWICE  THE  NOMINAL  VALUES  OF  THE  INTEGRALLY  LIGHTED  DISPLAYS. 

THE  BRIGHT-DIM  CONTROL  SHALL  RETURN  TO  FULL  BRIGHT  POSITION  UNDER  THE  CONDITIONS 
DESCRIBED  IN  8.S.  THE  INDICATORS  SHALL  NOT  RE  RESETTABLE  WHILE  THE  ACTIVATING  CONDITION 
EXISTS. 

8.8  STATUS  INDICATORS:  THE  STATUS  INDICATORS  SHALL  HAVE  A BRIGHTNESS  SUFFICIENT  FOR  LEGIBI- 
LITY UNDER  ALL  CONDITIONS  OF  FLIGHT  OPERATION.  THE  DESIGNER  SHALL  CONSIDER  LOCATION 
AND  SHADING  FROM  SUNLIGHT  TO  ENHANCE  READABILITY  AT  LOWER  BRIGHTNESSES.  THE  INDICA- 
TORS SHALL  BE  DIMMABLE  TO  VALUES  COMPARABLE  TO  THE  INTEGRALLY  LIT  DISPLAYS  OF  SECTION  S. 

8.9  LEGENDS:  IN  GENERAL,  WHERE  INDICATORS  HAVE  LEGENDS,  THE  LEGEND  SHOULD  BE 
ON  AN  OPAQUE  BACKGROUND.  CONSIDERATION  MAY  BE  GIVEN  TO  AN  OPAQUE  LEGEND  ON  A TRANS- 
LUCENT BACKGROUND  WHERE  ADDITIONAL  VISUAL  STIMULUS  IS  CONSIDERED  ESSENTIAL.  LEGENDS 
SHOULD  BE  AS  BRIEF  AS  POSSIBLE  AND  ONE  LINE  PRESENTATIONS  ARE  PREFERRED.  IP  ABBREVIA- 
TIONS ARE  USED,  THEIR  MEANING  SHOULD  BE  CLEAR  TO  AVOID  MISINTERPRETATION. 
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1 .6  WARNING  AND  ALERT  INDICATIONS;  DISTINCTIVE  AURAL  AND  VISUAL  WARNING  MUST  BE  PROVIDED 
FOR  MODES  1 THROUGH  4.  A SEPARATE  DISTINCTIVE  AURAL  ALERT  MUST  BE  PROVIDED  FOR  MODE  S. 

1.6.1  AURAL  WARNINO/ALERT;  THE  AURAL  WARNING  FOR  MODES  1 THROUGH  4 SHALL  CONSIST  OP  THE 
SOUND  “WHOOP-WHOOP",  FOLLOWED  BY  EITHER  “PULL-UP"  OR  “TERRAIN"  (OR  OTHER  ACCEPTABLE 
ANNUNCIATION)  REPEATED  UNTIL  THE  HAZARDOUS  CONDITION  NO  LONGER  EXISTS.  THE  WARNING 
MAY  BE  PROVIDED  BY  THE  GPW  EQUIPMENT  ITSELF  OR  AN  AUXILIARY  WARNING  UNIT  WHICH  IS  ACTI- 
VATED BY  THE  GPW  EQUIPMENT. 

THE  AURAL  ALERT  FOR  MODE  S SHALL  CONSIST  OF  THE  ANNUNCIATION  “GLIDE  SLOPE"  (OR  OTHER 
ACCEPTABLE  PHRASE)  REPEATED  UNTIL  THE  CONDITION  RESPONSIBLE  FOR  THE  ALERT  NO  LONGER 
EXISTS  OR  THE  ALERT  IS  INHIBITED. 

1.6.2  VISUAL  WARNING  CHARACTERISTICS  (MODES  I THROUGH  4);  THE  VISUAL  WARNING  PROVIDED  FOR 
MODES  1 THROUGH  4 SHALL  BE  DISTINCTIVE  UNDER  ALL  NORMAL  LIGHTING  CONDITIONS  AND  COM- 
MENSURATE WITH  OTHER  COCKPIT  WARNINGS. 

1.6.3  EMEROENCY/PLANNED  ABNORMAL  DEAC'HVATIONi  MEANS  .TO  DEACTIVATE  THE  WARNING  INDICA- 
TIONS (MODES  1 THROUGH  4)  MAY  BE  PROVIDED,  AND  MEANS  TO  DEACTIVATE  THE  ALERT  INDICA- 
TION (MODE  3)  MUST  BE  PROVIDED  FOR  FUOHTCREW  USE  IN  PLANNED  ABNORMAL  OR  EMERGENCY 
CONDITIONS. 

3.3  CHARACTERISTICS  OP  WARNING  INDICATIONS  (MODES  1 THROUGH  4) 

3.3.1  AURAL  WARNING  CHARACTERISTICS;  THE  AURAL  WARNING  FOR  MODES  1 THROUGH  4 CONSISTS  OP 
THE  SOUND  "WHOOP-WHOOP,"  FOLLOWED  BY  EITHER  “PULL-UP"  OR  “TERRAIN"  (OR  OTHER  ACCEP- 
TABLE ANNUNCIATION)  REPEATED  UNTIL  THE  HAZARDOUS  CONDITION  NO  LONGER  EXISTS.  IT  IB 
NOT  NECESSARY  FOR  ANY  WARNING  CYCLE  ("WHOOP-WHOOP"  PLUS  VOICE  ANNUNCIATION)  TO  BE 
COMPLETED  FOLLOWING  THE  TERMINATION  OF  A HAZARDOUS  CONDITION.  "WHOOP-WHOOP"  IS 
DESCRIBED  AS  A TONE  SWEEP  FROM  400  Hi  * 10ft  TO  SOO  Hi  + 10ft  AT  A PERIOD  OF  0.3  SECONDS  * 20ft 
AND  WITH  INCREASING  AMPLITUDE  OF  9 dB  + 3 dB.  THE  COMPLETE  CYCLE  OF  TWO  TONE  SWEEPS  PLUS 
VOICE  ANNUNCIATION  SHOULD  TAKE  1.4  SECONDS  + 30ft,  WITH  THE  CYCLE  REPEATED  IMMEDIATELY. 
THE  GAIN  MAY  BE  AUTOMATICALLY  REDUCED  AFTER  THREE  COMPLETE  WARNING  CYCLES  TO  A 
LOWER,  BUT  DISCERNABLE.  LEVEL. 

3.3.1. 1 SPEAKER  OUTPUT  LEVEL:  THE  VOICE  WARNING  SIGNAL  SHALL  HAVE  AN  OUTPUT  LEVEL  OF  AT  LEAST 
3W  RMS. 

3.3.1.3  HEADSET  OUTPUT  LEVEL:  IF  PROVIDED,  THE  HEADSET  VOICE  WARNING  SIGNAL  SHALL  HAVE  AN  OUT- 
PUT LEVEL  OF  AT  LEAST  SO  mW. 

3.3.2  VISUAL  WARNING:  THE  VISUAL  WARNING  FOR  MOOES  1 THROUGH  4 SHALL  BE  RED  AND  INCLUDE,  IN 
DISTINaiVE  LETTERS,  THE  LETTERS  GPWS  (OR  OTHER  ACCEPTABLE  LEGEND), 

2,4  DEACTIVATION  CONTROL;  THE  CONTROL  FOR  DEACTIVATION  OF  THE  WARNING  INDICATIONS  UNDER 

PLANNED  ABNORMAL  OR  EMERGENCY  CONDITIONS  SHALL  BE  A CIRCUIT  BREAKER.  ALTERNATIVELY 
A SWITCH  WHICH  IS  PROTECTED  FROM  INADVERTENT  CREW  OPERATION  MAY  BE  USED.  SUCH  A SWITCH 
SHALL  PROVIDE  OBVIOUS  INDICATION  IT  HAS  BEEN  OPERATED. 

2.6  GLIDE  SLOPE  DEVIATION  ALTERING  (MODE  9) 

3.6.1  ENVELOPE  OF  CONDITIONS  FOR  ALERTING:  AN  ALERT  SHALL  BE  PROVIDED  WHEN  THE  COMBINATION 
OF  DEVIATION  BELOW  AN  ILS  GLIDE  SLOPE  AND  THE  HEIGHT  ABOVE  TF.RRAIN  IS  WITHIN  THE  ENVE- 
LOPE FOR  MODE  S PRESCRIBED  IN  APPENDIX  A. 

2.6.3  DEACTIVATION:  IT  SHALL  BE  POSSIBLE  FOR  THE  FLIGHT  CREW  TO  DEACTIVATE  MODE  S.  THE  CON- 
TROL  PROVIDED  FOR  THIS  PURPOSE  SHALL  BE  SEPARATE  FROM  ANY  CONTROL  PROVIDED  TO  DEACTI- 
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VATE  MODES  t THROUGH  4.  THE  MODE  i THROUGH  4 DEACTIVATION  CONTROL,  HOWEVER,  MAY  AL«0 
DEACTIVATE  MODE  5. 

2.«.)  REACTIVATION:  IP  MODE  S IS  DEACTIVATED  BY  THE  PILOT,  IT  SHALL  BE  AUTOMATICALLY  REACH* 
VATED  FOR  THE  NEXT  APPROACH . 

2.6.4  ARMING/DISARMING:  MODE  S SHALL  BE  ARMED  WHEN  THE  LANDING  GEAR  IS  SBLSaED  TO  THE  LAND- 
ING POSITION  AND  DISARMED  EITHER  WHEN  THE  FLAPS  ARE  RETRACTED  PROM  THE  LANDINO  ^t* 
TION  OR  THE  LANDING  GEAR  IS  SELECTED  TO  THE  non-landing  POSITION. 

2.6.5  CLIDE  SLOPE  MODE  ALERT;  THE  GLIDE  SLOPE  DEVIATION  ALERT  SHALL  CONSIST  OF  THE  AURAL 
ANNUNCIATION  "GLIDE  SLOPE"  (OR  OTHER  ACCEPTABLE  ANNUNCIATION)  REPEATED  UNTIL  THE  CON* 
DITION  RESPONSIBLE  FOR  THE  ALERT  NO  LONGER  EXISTS  OR  THE  ALERT  IS  INHIBITED.  AN  AURAL 
WARNING  RELATED  TO  OPWS  MODES  1 THROUGH  4 SHALL  TAKE  PRECEDENCE  OVER  THIS  ALERT. 

THE  EQUIPMENT  MAY  PROVIDE  A CONSTANT  ALERT  REPETITION  RATE  AND  AUDIO  OUTPUT  LEVEL,  OR 
ONE  OR  BOTH  OF  THESE  QUANTITIES  MAY  INCREASE  AS  THE  BELOW  GLIDE  SLOPE  DEVIATION 
INCREASES  AND/OR  THE  TERRAIN  CLEARANCE  DECREASES,  IN  THE  FORMER  CASE  THE  ALERT  SHALL 
BE  REPEATED  AT  LEAST  ONCE  EVERY  THREE  SECONDS.  THE  AUDIO  OUTPUT  POWER  LEVELS  MAY  TAKE 
ON  ANY  VALUE  BETWEEN  0 AND  6dB  BELOW  THOSE  VALUES  SPECIFIED  FOR  THE  MODES  I THROUGH  4 
AURAL  WARNING  IN  PARAGRAPHS  2.3, l.I  AND  2, 3.1.2. 

IP  THE  REPETITION  RATE/AUDIO  OUTPUT  LEVEL  IS/ARE  VARIED  WITH  TERRAIN  CLBARANCB/OLIDE 
SLOPE  DEVIATION,  THE  ALERT  SHOULD  BE  REPEATED  ONCE  EVERY  SEVEN  SECONDS  (NOMINAL)  AT 
1000  FEET  TERRAIN  CLEARANCE  AND  THR  AUDIO  LEVELS  BE  DISCERNABLE  'TO  THE  PILOT,  AS  THE 
TERRAIN  CLEARANCE  DECREASES  AND/OR  THE  GLIDE  SLOPE  DEVIATION  INCREASES,  THE  ALERT 
RATE  SHOULD  INCREASE  TO  A MAXIMUM  OP  ONCE  EVERY  0.7  SECONDS  AND  THE  AUDIO  OUlTUT 
POWER  LEVELS  TO  THE  MAXIMUM  OF  THOSE  VALUES  SPECIFIED  FOR  THE  MODES  1 THROUGH  4 AURAL 
WARNING  IN  PARAGRAPHS  2.3.1.1  AND  2.3.I.2. 
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3.1  LIGHT  SIGNALS ; 

3.1.1  NON-LEGEND  TYPE:  A NON-LECENO  LIGHT  SIGNAL  ASSEMBLY  IS  ONE  WHICH  HAS  NO  MARKINGS  ON  ITS 
LIGHT  TRANSMITTING  SURFACE. 

3.1.2  LEGEFID  TYPE:  A LEGEND  LIGHT  SIGNAL  ASSEMBLY  IS  ONE  WHICH  HAS  THE  LEGEND  ON  ITS  LIGHT 
TRANSMITTING  SURFACE. 

3.1.3  WARNING  LIGHT:  A WARNING  LIGHT  IS  A SIGNAL  ASSEMBLY  WHICH  INDICATES  THE  EXISTENCE  OF  A 
HAZARDOUS  CONDITION  REQUIUINO  IMMEDIATE  CORRECTIVE  ACTION. 

3.1.1.3  MASTER  WARNING  LIGHT  RESET:  THE  MASTER  WAkNING  LIGHT  SHALL  HAVE  A PUSH-TO-RESET  CAPA- 
BILITY WHICH  DEENERGIZES  THE  MASTER  WARNING  LIGHT. WHILE  THE  APPLICABLE  LEGEND  WARNING 
LIGHT  REMAINS  “ON,"  THE  MASTER  WARNING  LIGHT  AND  ANY  APPLICABLE  WARNING  LIOHT(S)  SHALL 
BE  ENERGISED  SIMULTANEOUSLY. 

A.  THE  AIRCRAFT  POWER  SETTING  IS  LESS  THAN  THAT  REQUIRED  TO  MAINTAIN  LEVEL  FLIGHT  IN 
niE  POWER  APPROACH  CONFIGURATION. 

B.  THE  FLAPS  OR  OTHER  HIGH-LIFT  DEVICES  ARE  NOT  FULLY  RETRACTED. . 

. C.  THE  WHEELS  ARE  NOT  DOWN  AND  LOCKED. 

3.1.4  MASTER  WARNING. LIGHT:  A MASTER  WARNING  LIGHT  IS  A SIGNAL  ASSEMBLY  WHICH  INDICATES  THAT 
AT  LEAST  ONE  OR  More  WARNING  LIGHTS  iMAVE  been  ENERGIZED, 

3.1.5  CAUTION  LIGHT:  A CAUTION  LIGHT  IS  A SIGNAL  ASSEMBLY  WHICH  INDICATES  THE  EXISTENCE  OF  AN 
IMPENDING  DANGEROUS  CONDITION  REQUIRING  ATT.ENTION  BUT  NOT  NECESSARILY  IMMEDIATE 

■ ACTION, 

3.1.6  MASTER  CAUTION  LIGHT:  A MASTER  CAUTION  LIGHT  IS  A SIGNAL  ASSEMBLY  WHICH  INDICATES  THAT 
ONE  OR  MORE  CAUTION  LIGHTS  HAVE  BEEN  ACTUATED, 

3.1.7  ADVISORY  LIGHT:  AN  ADVISORY  LIGHT  IS  A SIGNAL  AlSEMBLY  TO  INDICATE  SAFE  OR  NORMAL  CON- 
FIGURATION, CONDITION  OF  PERFORMANCE.  OPERATION  OF  ESSENTIAL  EQUIPMENT,  OR  TO  AnRACT 
ATTENTION  AND  IMPART  INFORMATION  FOR  ROUTINE  ACTION  PURPOSES. 

3.2  AUDITORY  WARNING  SIGNALS:  AUDITORY  WARNING  SIGNALS  ARE  AUDIBLE  SIGNALS  INDICATING  THE 

EXISTENCE  OF  A HAZARDOUS  CONDITION(S)  REQUIRING  IMMEDIATE  CORRECTIVE  ACTION, 

5.1.1  WARNING  LIGHTS:  LEGEND  WARNING  LIGHTS  SHALL  BE  USED  IN  ALL  AIRCREW  STATIONS.  A MASTER 
WARNING  LIGHT,  WHEN  REQUIRED,  SHALL  BE  ENERGIZED  SIMULTANEOUSLY  WITH  ANY  APPLICABLE 
WARNING  LIGHT. 

5.1.1. 1 COLOR:  THE  COLOR  OF  THE  WARNING  LIGHTS  SHALL  BE  AVIATION  RED. 

5.1.2  CAUTION  LIGHTS:  LEGEND  TYPE  MASTER  CAUTION  AND  LEGEND  TYPE  CAUTION  LIGHTS  SHALL  BE 
USED  IN  ALL  AIRCREW  STATIONS,  THE  MASTER  CAUTION  LIGHT  AND  ANY  APPLICABLE  LEGEND  CAU- 
TlON  LIGHT  SH.VLL  BE  ENERGIZED  SIMULTANEOUSLY. 

5.1.2.1  COLOR;  THE  COLOR  OF  THE  CAUTION  LIGHTS  SHALL  BE  AVIATION  YELLOW, 

5.1 ,2.6  MASTER  L AUTION  LIGHT  RESET:  THE  MASTER  CAUTION  LIGHT  SHaLL  HAVE  A EUSH-TO-RESFT  CAPA- 
BILITY WHICH  DEENERGIZES  THE  MASTER  CAUTION  LIGHT  WHILE  THE  APPLICABLE  LEGEND  CAUTION 
LIGHT  REMAINS  "ON." 

5.1.3  ADVISORY  LIGHTS;  EVERY  ATTEMPT  SHOULD  BE  MADE  TO  MINIMIZE  THE  USE  OF  ADVISORY  LIGHTS  IN 
THE  COCKPIT  AREA,  PRIMARILY  TO  AVOID  UNNECESSARY  DISTRACTION  OF  Till',  PILOTS  AND  TO  MINI- 


182 


TABLE  E-6  (CONT) 

SYNOPSIS  OF  ALERTING  SYSTEM  REQUIREMENTS  IN  MIL-STD41 1 


MIZt  TIIOSi:  1 ACTORS  WHICH  UI.TI  RIORATI;  NIGHT  VISION  CAPABILITY  01  Tilt  CRtW.  THtY  SHALL 
NOT  BE  USED  WHERE  OTHER  METHODS,  SUCH  AS  SWITCH  LABELING,  MECHANICAL  VISUAL  SIGNALS, 
ETC.,  MAY  BE  EMPLOYED.  ADVISORY  LIGHTS  MAY  BE  EITHER  OF  THE  LEGEND  OR  NON-LEGEND  TYPE, 
IN  THE  EVENT  THAT  A LEGEND  LIGHT  IS  NOT  EMPLOYED,  A READILY  IDENTIFIABLE  LABEL  SHALL  BE 
PROVIDED  ADJACENT  TO  THE  LIGHT,  PREFERABLY  ABOVE, 

COLOR:  THE  COLOR  OF  ADVISORY  LIGHTS  IN  THE  FLIGHT  COMPARTMENT  SHALL  BE  AVIATION  GREEN. 
GREEN,  BLUE,  OR  WHITE  COLORS  MAY  BE  USED  IN  OTHER  CREW  STATIONS. 

MASTER  WARNING  SIGNALS;  A NON-VERBAL  AUDIO  MASTER  WARNING  SIGNAL  SHALL  PRODUCE  AN 
OUTPUT  WITH  THE  FOLLOWING  FREQUENCY  AND  INTERRUPTION  RATES: 

A.  FUNDAMENTAL  AUDIO  OUTPUT  FREQUENCY  SHALL  SWEEP  FROM  700  Hs  TO  1,700  Hk  IN  0,8! 
SECOND. 

B.  INTERRUPTION  INTERVAL  0.13  SECOND. 

C.  THE  CYCLE  SHALL  BE  REPEATED  UNTIL  THE  SIGNAL  GENERATOR  IS  DEENERGIZED. 

WHEELS-UP-SIGNAL:  WHEN  A NON-VERBAL  AUDIO  WHEELS-UP  SIGNAL  IS  USED,  IT  SHALL  HAVE  THE 
FOLLOWING  TONE: 

FREQUENCY  3!U  i!0  Hi,  FUNDAMENTAL  TONE  INTERRUPTED  AT  S.O  *1,0  Hi 
WITH  A !0  *10  PERCENT  ON-OFF  CYCLE. 

AUDIO  ANGLE  OF  ATTACK/AIRSPEED/STALL  WARNING  SIGNAL;  WHEN  A NON-VERBAL  AUDIO  SIGNAL 
IS  USED  FOR  PRESENTING  ANGLE  OF  ATTACK/AIRSPEED/STALL  WARNING  INFORMATION,  REFER- 
ENCED TO  A SELECTED  ANCLE  OF  ATTACK/AIRSPEED/STALL  SPEED,  IT  SHALL  BE  AS  NOTED  IN  TABLE 
IV.  THE  DISCRETE  POSITION  AT  WHICH  THE  CHOPPED  SIGNAL  COMMENCES  ON  EITHER  SIDE  OF  THE 
"CORRECT"  SIGNAL  WILL  BE  READILY  ADJUSTABLE. 

VERBAL  AUDITORY  WARNING  SIGNALS;  VERBAL  WARNING  SIGNALS  SHALL  BE  AUDIBLE  SIGNALS  IN 
VERBAL  FORM  INDICATING  THE  EXISTENCE  OF  A HAZARDOUS  OR  IMMINENT  CATASTROPHIC  CONDI- 
TION REQUIRING  IMMEDIATE  ACTION  AND  SHALL  ONLY  BE  USED  TO  COMPLEMENT  RED  WARNING  OR 
OTHER  CRITICAL  VISUAL  SIGNALS.  THE  VERBAL  WARNING  SIGNALS  SHALL  BE  PRESENTED  AT  LEVELS 
WHICH  WILL  INSURE  OPERATOR  RECEPTION  UNDER  NOISE  CONDITIONS  IN  THE  SPECIFIC  AIRCRAFT, 
THERE  SHALL  BE  PROVISION  FOR  OVERRIDING  AND  RESETTING  THE  SIGNALS.  THE  SIGNAL,  WHEN 
ACTIVATED,  SHALL  ALWAYS  START  AT  THE  BEGINNING  OF  THE  MESSAGE  AND  SHALL  CONTINUE  TO 
BE  PRESENTED  UNTIL  EITHER; 

A , THE  CAUSATIVE  CONDITION  IS  CORRECTED. 

B,  A WARNING  OF  HIGHER  PRIORITY  IS  PRESENTED. 

C,  THE  SIGNAL  IS  SILENCED  BY  MANUAL  ACTUATION  OF  THE  OVERRIDE  SWITCH, 

THE  STRUCTURE  FOR  VERBAL  WARNINGS  SHALL  BE: 

A,  GENERAL  HEADINO-I.E.,  THE  SYSTEM  OR  SERVICE  INVOLVED 

B,  SPECIFIC  SUBSYSTEM  OR  LOCATION 

C,  NATURE  OF  EMERGENCY 


i 
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TABLE  IV 

AUDIO  ANGLE  OE  ATTACK/ AIR  SPEED/STALL 
WARNING  SIGNAL 


ANGLE  OF' 
ATTACK 

AIRSPEED 

TONE  SIGNAL 

LOW 

FAST 

1,600  TONE  INTERRUPTED  AT  A RATE  OF  1 TO  10  H»,THE 
HATE  INCREASING  LINEARLY  WITH  DECREASING  ANGLE 
OF  ATTACK/INCREASINO  AIRSPEED, 

SAFE  LOW 

SAFE  FAST 

900  Hz  STEADY  TONE,  PLUS  1,600  Hz  TONE  INTERRUPTED 
AT  A RATE  OF  ZERO  TO  1 Hz,  THE  RATE  INCREASING 
LINEARLY  WITH  DECREASING  ANGLE  OF  ATTACK/ 
INCREASING  AIRSPEED. 

CORRECT 

CORRECT 

900  Hz  STEADY  TONE. 

SAFE  HIGH 

safe  low 

900  Hz  STEADY  TONE.  PLUS  400  Hz  TONE  INTERRUPTED 
AT  A RATE  OF  ZERO  TO  1 Hz.  THE  RATE  INCREASING 
LINEARLY  WITH  INCREASING  ANGLE  OF  ATTACK/ 
DECREASING  AIRSPEED. 

HIGH 

SLOW 

400  Hz  TONE  INTERRUPTED  AT  A RATE  OF  1 Hz  TO  10  Hz, 
THE  RATE  INCREASING  LINEARLY  WITH  INCREASING 
ANGLE  OF  ATTACK/DECREASINO  AIRSPEED  (STALL 
WARNING). 

5, 4.1, a WARNING  LIGHTS;  WARNING  LIGHTS  SHALL  BE  INSTALLED  WITHIN  THE  PILOT’S  30-DECREE  CONE  OF 

VISION.  WHEN  SPACE  IS  LIMITED  OR  THE  REQUIRED  NUMBER  OF  WARNING  LIGHTS  IS  EXCESSIVE, 
W-ARNINC  LIGHTS  MAY  BE  GROUPED  OUTSIDE  OF  THE  PILOT'S  30-DEGREE  CONE  OF  VISION.  IN  THESE 
CASES,  A MASTER  WARNING  LIGHT  SHALL  BE  INSTALLED  IN  THE  PILOT’S  30-DEGREE  CONE  OF  VISION, 
AND  IN  ADDITION,  A MASTER  AUDITORY  WARNING  SIGNAL  MAY  BE  USED. 

5.4. 1.3.2  SIDE-BY-SIDE  PILOT  COCKPITS:  CAUTION  LIGHTS  SHALL  BE  GROUPED  AT  THE  LOWER  PORTION  OF  THE 
CENTER  INSTRUMENT  PANEL  BELOW  THE  INSTRUMENTS  OR  ON  THE  CENTER  PEDESTAL  IMMEDIATELY 
AFT  or  THE  POWER  QUADRANT.  THE  LIGHTS  SHALL  BE  VISIBLE  TO  BOTH  PILOTS. 

3, 4.4,5  SIDE-BY-SIDE  PILOT  COCKPITS;  A MASTER  CUATION  LIGHT  SHALL  BE  INSTALLED  ON  THE  UPPER  POR- 
TION OF  THE  INSTRUMENT  PANEL  WITHIN  BOTH  PILOTS’  30-DEGREE  CONE  OF  VISION.  IF  THE  ABOVE 
CRITERIA  CANNOT  BE  MET  WITH  ONE  LIGHT  ASSEMBLY.  THEN  TWO  MASTER  CAUTION  LIGHTS  SHALL 
BE  INSTALLED, 

3.4.4.4.3  ADVISORY  LIGHTS;  ADVISORY  LIGHTS  SHALL  BE  GROUPED  CATEGORICALLY  OR  FUNCTIONALLY 
WHERE  PRACTICAL,  OR  ASSOCIATED  WITH  A SPECIFIC  UNIT  OR  COMPONENT,  AND  SHALL  BE  SO 
LOCATED  THAT  THEY  CAN  BE  OBSERVED  FROM  THE  OPERATOR’S  NORMAL  POSITION,  EXCEPT  WHERE 
SPECIFICALLY  AUTHORIZED,  ADVISORY  LIGHTS  SHALL  NOT  BE  LOCATED  ON  THE  MAIN  INSTRUMENT 
PANEL  OR  SUBPANEL  IN  THE  COCKPIT. 
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5.2.2. 1.1  USE;  TRANSIUUMINATED  INDICATORS  SHOULD  BE  USED  TO  DISPLAY  QUALITATIVE  INFORMATION  TO 
THE  OPERATOR  (PRIMARILY,  INFORMATION  THAT  REQUIRES  EITHER  AN  IMMEDIATE  REACTION  ON 
THE  PART  OF  THE  OPERATOR,  OR  THAT  HIS  ATTENTION  BE  CALLED  TO  AN  IMPORTANT  SYSTEM 
STATUS).  SUCH  INDICATORS  MAY  ALSO  BE  USED  OCCASSIONALLY  FOR  MAINTENANCE  AND  ADJUST- 
MENT FUNCTIONS. 

5.2.2.1.5  GROUPING:  MASTER  CAUTION,  MASTER  WARNING,  MASTER  ADVISORY  AND  SUMMATION  LIGHTS  USED 
TO  INDICATE  THE  CONDITION  OF  AN  ENTIRE  SUBSYSTEM  SHALL  BE  SET  APART  FROM  THE  LIGHTS 
WHICH  SHOW  THE  STATUS  OF  THE  SUBSYSTEM  COMPONENTS,  EXCEPT  AS  REQUIRED  UNDER  PARA- 
GRAPH 5.2.2.1,8. 

5.2.2.1.6  LOCATION:  WHEN  A TRANSILLUMINATED  INDICATOR  IS  ASSOCIATED  WITH  A CONTROL,  THE  INDI- 
CATOR LIGHT  SHALL  BE  SO  LOCATED  AS  TO  BE  IMMEDIATELY  AND  UNAMBIGUOUSLY  ASSOCIATED 
WITH  THE  CONTROL  AND  VISIBLE  TO  THE  OPERATOR  DURING  CONTROL  OPERATION, 

5.2.2.1.7  LOCATION.  CRITICAL  FUNCTIONS;  FOR  CRITICAL  FUNCTIONS,  INDICATORS  SHALL  BE  LOCATED  WITHIN 
15'^  OF  THE  OPERATOR'S  NORMAL  LINE  OF  SIGHT  (SEE  FIGURE  2).  WARNING  LIGHTS  SHALL  BE  AN 
INTEGRAL  PART  OF,  OR  LOCATED  ADJACENT  TO,  THE  LEVER,  SWITCH,  OR  OTHER  CONTROL  DEVICE  BY 
WHICH  THE  OPERATOR  IS  TO  TAKE  ACTION. 

5.2.2.1.18  COLOR  CODING;  WITH  THE  EXCEPTION  OF  AIRCREW  STATION  SIGNALS  WHICH  SHALL  CONFORM  TO 
MIL-STD-411,  AND  TRAINING  EQUIPMENT  WHICH  SHALL  CONFORM  TO  MIL-T-23991,  TRANSILLUMINATED 
LIGHT  EMITTING  DIODE  (LED)  AND  INCANDESCENT  DISPLAYS  SHALL  CONFORM  TO  THE  FOLLOWING 
COLOR  CODING  SCHEME,  IN  ACCORDANCE  WITH  TYPE  I-AVIATION  COLORS  OF  MIL-C-2S050. 

A.  RED  SHALL  BE  USED  TO  ALERT  AN  OPERATOR  THAT  THE  SYSTEM  OR  ANY  PORTION  OF  THE  SYS- 
TEM  IS  INOPERATIVE,  OR  THAT  A SUCCESSFUL  MISSION  IS  NOT  POSSIBLE  UNTIL  APPROPRIATE 
CORRECTIVE  OR  OVERRIDE  ACTION  IS  TAKEN,  EXAMPLES  OF  INDICATORS  WHICH  SHOULD  BE 
CODED  RED  ARE  THOSE  WHICH  DISPLAY  SUCH  INFORMATION  AS  "NO-GO".  “ERROR",  "FAILURE", 
"MALFUNaiON",ETC, 

B.  FLASHING  RED  SHALL  BE  USED  ONLY  TO  DENOTE  EMERGENCY  CONDITIONS  WHICH  REQUIRE 
operator  action  TO  BE  TAKEN  WITHOUT  UNDUE  DELAY.  TO  AVERT  IMPENDING  PERSONNEL 
INJURY,  EQUIPMENT  DAMAGE,  OR  BOTH. 

C.  YELLOW  SHALL  BE  USED  TO  ADVISE  AN  OPERATOR  THAT  A CONDITION  EXISTS  WHICH  IS  MAR- 
GINAL. YELLOW  SHALL  ALSO  BE  USED  TO  ALERT  THE  OPERATOR  TO  SITUATIONS  WHERE  CAU- 
TION, RECHECK,  OR  UNEXPECTED  DELAY  IS  NECESSARY. 

D.  GREEN  SHALL  BE  USED  TO  INDICATE  THAT  THE  MONITORED  EQUIPMENT  IS  IN  TOLERANCE  OR  A 
CONDITION  IS  SATISFACTORY  AND  THAT  IT  IS  ALL  RIGHT  TO  PROCEED  (E.G„  "GO-AHUAD",  "IN- 
TOLERANCE", "READY",  "FUNCTION  ACTIVATED,"  "POWER  ON",  ETC,), 

E.  WHITE  SHALL  BE  USED  TO  INDICATE  SYSTEM  CONDITIONS  THAT  DO  NOT  HAVE  "RIGHT"  OR 
"WRONG"  IMPLICATIONS.  SUCH  AS  ALTERNATIVE  FUNCTIONS  (E,G.,  MISSILE  NO.  1 SELECTED  FOR 
LAUNCH,  ETC.)  OR  TRANSITORY  CONDITIONS  (E.G.,  ACTION  OR  TEST  IN  PROGRESS,  FUNCTION 
AVAILABLE),  PROVIDED  SUCH  INDICATION  DOES  NOT  IMPLY  SUCCESS  OR  FAILURE  OF 
OPERATIONS, 

F.  BLUE  MAY  BE  USED  FOR  AN  ADVISORY  LIGHT,  BUT  PREFERENTIAL  USE  OF  BLUE  SHOULD  BE 
AVOIDED, 

5.2.2.1.19  FLASHING  LIGHTS;  THE  USE  OF  FLASHING  LIGHTS  SHALL  BE  MINIMIZED.  FLASHING  LIGHTS  MAY  BE 
USED  ONLY  WHEN  IT  IS  NECESSARY  TO  CALL  THE  OPERATOR’S  ATTENTION  TO  SOME  CONDITION 
REQUIRING  ACTION,  THE  FLASH  RATE  SHALL  BE  WITHIN  3 TO  5 FLASHES  PER  SECOND  WITH  APPROXl- 
MATELY  EQUAL  AMOUNTS  OF  ON  AND  OFF  TIME.  THE  INDICATOR  SHALL  BE  SO  DESIGNED  THAT.  IF  IT 
IS  ENERGIZED  AND  THE  FLASHER  DEVICE  FAILS,  THE  LIGHT  WILL  ILLUMINATE  AND  BURN  STEADILY 
(SEE  5. 3.2.4). 
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S.2.6.S  FLAGS: 

5.2.5.5.1  APPLICATION:  FLAGS  SHOULD  BE  USED  TO  DISPLAY  QUALITATIVE,  NON>EMERCENCY  CONDITIONS. 

5,2,6.J,3  MALFUNCTION  INDICATION:  WHEN  FLAGS  ARE  USED  TO  INDICATE  THE  MALFUNCTION  OF  A VISUAL 

DISPLAY,  THE  MALFUNCTION  POSITION  OF  THE  FLAG  SHALL  AT  LEAST  PARTIALLY  OBSCURE  THE 
OPERATOR'S  VIEW  OF  THE  MALFUNCTIONING  DISPLAY  AND  SHALL  BE  READILY  APPARENT  TO  THE 
OPERATOR  UNDER  ALL  EXPECTED  LEVELS  OF  ILLUMINATION. 

3, J, 6.3,6  TEST  PROVISION:  A CONVENIENT  MEANS  SHALL  BE  PROVIDED  FOR  TESTKU  THE  OPERATION  OF 

FLAGS. 

S.3.4.3.6  PROHIBITED  TYPES  OF  SIGNALS!  THE  FOLLOWING  TYPES  OF  SIGNALS  SHALL  NOT  BE  USED  AS  WARN- 
ING DEVICES  WHERE  POSSIBLE  CONFUSION  MIGHT  EXIST  BECAUSE  OF  THE  OPERATIONAL 
ENVIRONMENT: 

A.  MODULATED  OR  INTERRUPTED  TONES  THAT  RESEMBLE  NAVIGATION  SIGNALS  OR  CODED  RADIO 
TRANSMISSIONS, 

B.  STEADY  SIGNALS  THAT  RESEMBLE  HISSES,  STATIC,  OR  SPORADIC  RADIO  SIGNALS. 

C.  TRAINS  OF  IMPULSES  THAT  RESEMBLE  ELECTRICAL  INTERFERENCE  WHETHER  REGULARLY  OR 
IRREGULARLY  SPACED  IN  TIME. 

D.  SIMPLE  WARBLES  WHICH  MAY  BE  CONFUSED  WITH  THE  TYPE  MADE  BY  TWO  CARRIERS  WHEN  ONE 
IS  BEING  SHIFTED  IN  FREQUENCY  (BEAT-FREQUENCYOSCILLATOR  EFFECT). 

E.  SCRAMBLED  SPEECH  EFFECTS  THAT  MAY  BE  CONFUSED  WITH  CROSS  MODULATION  SIGNALS 
FROM  ADJACENT  CHANNELS. 

F.  SIGNALS  THAT  RESEMBLE  RANDOM  NOISE,  PERIODIC  PULSES,  STEADY  OR  FREQUENCY  MODU- 
LATED SIMPLE  TONES,  OR  ANY  OTHER  SIGNALS  GENERATED  BY  STANDARD  COUNTERMEASURE 
DEVICES  (E.G„  "BAGPIPES"). 

G.  SIGNALS  SIMILAR  TO  RANDOM  NOISE  GENERATED  BY  AIR  CONDITIONING  OR  ANY  OTHER 
EQUIPMENT. 

H.  SIGNALS  THAT  RESEMBLE  SOUNDS  LIKELY  TO  OCCUR  ACCIDENTLY  UNDER  OPERATIONAL 
CONDITIONS, 

3.3.3  VERBAL  WARNING  SIGNALS: 

5.3.5.1  NATURE  OF  SIGNALS;  VERBAL  WARNING  SIGNALS  SHALL  CONSIST  OF: 

A.  AN  INITIAL  ALERTING  SIGNAL,  (NONSPEECH)  TO  ATTRACT  ATTENTION  AND  TO  DESIGNATE  THE 
GENERAL  PROBLEM. 

B.  A BRIEF  STANDARDIZED  SPEECH  SIGNAL  (VERBAL  MESSAGE)  WHICH  IDENTIFIES  THE  SPECIFIC 
CONDITION  AND  SUGGESTS  APPROPRIATE  ACTION. 

3.3.5. 6. 1 CRITICAL  WARNING  SIGNALS:  CRITICAL  WARNING  SIGNALS  SHALL  BE  REPEATED  WITH  NOT  MORE 
THAN  A 3-SECOND  PAUSE  BETWEEN  MESSAGES  UNTIL  THE  CONDITION  IS  CORRECTED  ON  OVERRIDDEN 
BY  THE  CREW, 

3.3,6, 2 AUTOMATIC  RESET;  WHETHER  AUDIO  WARNING  SIGNALS  ARE  DESIGNED  TO  BE  TERMINATED  AUTO- 
MATICALLY, BY  MANUAL  CONTROL,  OR  BOTH,  AN  AUTOMATIC  RESET  FUNCTION  SHALL  BE  PROVIDED, 
THE  AUTOMATIC  RESET  FUNCTION  SHALL  BE  CONTROLLED  BY  THE  SENSING  MECHANISM  WHICH 
SHALL  RECYCLE  THE  SIGNAL  SYSTEM  TO  A SPECIMED  CONDITION  AS  A FUNCTION  OF  TIME  OR  THE 
STATE  OF'  THE  SIGNALING  SYSTEM. 
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3.J  .7  PANEL  MARKINGS  SHALL  BE  WHITE  EXCEPT  WHEN  ILLUMINATED  OR  WHEN  THEY  DENOTE  EMERGENCY 

■ACTION  CONTROLS. 

3.6.2.1  LEGEND  ILLUMINATED  PUSHBUTTO'nS  SHOULD  HAVE  A STROKE  WIDTH  BORDER. 

3.6.3  LIGHTED  DISPLAYS  (INCLUDING  ALERTING  DEVICES)  SHALL  HAVE  A MINIMUM  CONTRAST  RATIO  OF 
3 IN  A 10,000  FOOT-CANDLE  AMBIENT. 

3.9.1  D.  REDUNDANCY  IN  THE  DISPLAY  OF  INFORMATION  TO  A SINGLE  OPERATOR  SHOULD  BE  AVOIDED 

UNLESS  REDUNDANCY  IS  REQUIRED  TO  ACHIEVE  A SPECIFIED  RELIABILITY. 

E.  INFORMATION  NECESSARY  FOR  PERFORMING  DIFFERENT  ACTIVITIES,  SUCH  AS  OPERATION  AND 
TROUBLE-SHOOTING,  SHOULD  NOT  BE  COMBINED  IN  A SINGLE  DISPLAY  UNLESS  THE  ACTIVITIES  ARE 
COMPARABLE  FUNCTIONS  AND  REQUIRE  THE  SAME  INFORMATION. 

3.9.2.1.3  AN  ADVISORY  LIGHT  IS  AN  ILLUMINATED  SIGNAL  ASSEMBLY  WHICH  INDICATES  SAFE  OR  NORMAL 
CONFIGURATION,  CONDITION  OF  PERFORMANCE,  OR  OPERATION  OF  ESSENTIAL  EQUIPMENT,  OR 
WHICH  ATTRACTS  ATTENTION  AND  IMPARTS  INFORMATION  FOR  ROUTINE  ACTION  PURPOSES.  THE  USE 
OF  ADVISORY  LIGHTS  SHOULD  BE  MINIMIZED.  THEY  SHOULD  NOT  BE  USED  WHERE  OTHER  METHODS, 
SUCH  AS  SWITCH  LABELING,  MECHANICAL  VISUAL  SIGNALS,  ETC.,  MAY  BE  EMPLOYED. 

3.11.9  AN  ARRAY  OF  PUSHBUTTONS  SERVING  AS  AN  INTEGRATED  CONTROL  SHOULD  BE  ARRANGED  SUCH 
THAT,  IN  A LATERAL  ARRAY,  LEFT*TO-RIGHT  PROGRESSION  IS  IN  THE  ORDER  OF  INCREASING 
PRIORITY  OR  SEQUENCE,  AND  IN  A LONGITUDINAL  ARRAY,  THE  FORWARD  PROGRESSION  INDICATES 
ORDER  OP  INCREASING  PRIORITY  OR  SEQUENCE. 
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BACKGROUND  DATA  FOR  FORMULATION  OF  ALERT  PRIORITIZATION  RATIONALE 

F.O  INTRODUCTION 

This  appendix  presents  a historical  series  of  working  papers  and  dissertations  used  to  develop  the 
proposed  method  of  prioritizing  alerting  ftinctlons.  The  papers  are  presented  in  chronological 
sequence.  Each  major  section  in  this  appendix  denotes  a historical  break  point  in  the  commercial 
aviation  Industry's  development  of  alerting  system  standards. 
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49TH  MEETING  OF  SAE  S-7  COMMITTEE 
APRIL  1976 

STANDARDS  AND  CRITERIA  FOR  DESIGN  OF 
AN  INTEGRATED  WARNING  SYSTEM 

The  lists  of  warnings  that  are  presented  here  are  oriented  more  to  importance  of  the  warning  rather 
than  being  broken  into  the  categories  of  configuration,  flight  proHle,  and  systems  as  had  been 
suggested.  The  reason  for  this  was  that  it  seemed  that  a system  or  installation  designed  to  accomplish 
our  objectives  would  at  least  address  the  Level  I and  part  of  Level  II,  as  appropriate,  depending  on 
cost  and  complexity.  Level  III  type  of  Items  are  tower  priority  and  would  reduce  the  checklist  signi- 
ficantly but  quite  likely  would  be  of  hlglier  cost  and  complexity. 

In  considering  an  operational  Installation,  one  concept  might  be  to  use  a multiline  readout  (see 
Figure  1)  with  the  computer  logic  as  noted  under  the  visual  and  audio  alert  columns.  By  tying  the 
audio  alert  to  takeoff  thrust  application,  or  to  being  airborne,  or  to  descent  to  a height  near  the 
ground  most  of  the  nuisance  audio  alerts  can  be  eliminated.  This  would  mean  that  the  system  would 
be  in  the  "ground  mode"  or  “before  takeoff  mode"  all  the  time  when  on  the  ground  - the  readout 
would  show  items  not  set  for  takeoff  but  the  audio  would  be  silent  until  the  throttles  are  advanced. 
Similarly,  in  (light  below  2500*  the  “landing  mode"  would  be  energized  and  the  readout  would 
show  items  not  in  proper  conflgtirutlon  for  landing  but  no  audio  would  sound  until  descent  through 
1 000*  had  occurred  with  the  aircraft  still  not  in  configuration.  This  type  of  logic  mutt  be  thoroughly 
thought  out  and  evaluated  to  please,  let  us  have  your  ideas!  I 

if  there  were  more  than  five  or  six  discrepancies,  the  remaining  ones  would  appear  on  the  readout 
device  or  devices  as  soon  as  the  previous  discrepancies  were  cleared.  Also,  there  would  have  to  be  a 
provision  to  cancel  the  audio  In  the  event  of  an  engine  shutdown  or  loss  of  a particular  system  and 
for  other  reasons.  It  may  not  be  desirable  to  cancel  the  visual;  let  it  serve  as  a reminder.  Possibly  we 
might  need  more  than  five  or  six  lines  for  discrepancies  after  we  look  at  all  possibilities.  The  readout 
device  would  provide  the  crew  a self-check  or  confidence  check  during  the  pre-start  and  pre-takeoff 
phase  since  its  monitoring  of  the  various  items  would  be  apparent  to  the  crew. 

Level  I items  would  remain  as  currently  Implemented,  i.r.,  specially  dedicated  systems.  Level  II  A 
consists  mostly  of  the  present-day  warnings  that  excite  an  audio  sipd.  An  integrated  warning  system 
would  offer  the  most  benefit  by  Including  the  items  in  this  group.  Items  In  Level  II  B and  II C are 
highly  desirable  but  the  associated  costs  would  require  individual  consideration  for  each  item. 

AIRCRAFT  OPERATIONS  AND  SYSTEMS  MONHOR 

It  is  recommended  that  an  Integrated  monitpr  and  warning  system  be  Implemented  wherein  a visual 
alert  or  annunciation  provision  and  a single  audio  alert  signal  be  employed  to  bring  to  the  flight 
crew*s  attention  ony  faults  or  airplane  configuration  Incompatibilities.  The  aircraft  monitor  and 
warning  system  should  not  In  any  way  create  confusion  on  the  part  of  the  flight  crew,  should  alert 
them  to  a fault  or  discrepancy  in  a timely  fashion  and  should  result  in  reduced  crew  workload. 


190 


Page  2 


The  aircraft  faults  and  discrepancies  can  be  broken  into  three  levels  of  importance  or  urgency: 


Tactile 

Visual 

Audio 

Level  I (Immediate  Action) 

Alert 

Alert 

Alert 

1. 

Engine  Fire 

None 

Cont. 

Cont, 

2. 

Stall  or  Sudden  Loss  of  Lift 

Cont, 

None 

Cont, -Airborne 

3. 

Inadvertent  Ground  Proximity 

None 

Cont. 

Volce/Cont. 

Level  II  (Flight  Safety>ActIon  Required) 

Visual 

Audio 

A.) 

Alert 

Alert 

1. 

Cabin  Altitudo-Too  Hi  (rate  &.  height) 

Cont. 

Cont. 

* « 

Spoilers-Extended 

On  Flaps  Ext. 

• Tg&lOOO’  R.A. 

3. 

T.E.  & L.E.  Fhips-Improp.  Set 

On  Ground 

Tg&IOOO’  R.A. 

4, 

Airspeed-VMO»  Mmo  Exceedance 

Cont. 

Cont. 

5. 

Altitude  Diversion^Fllght  Profile) 

200’  After  Cptr. 

300'  Aft.  Cptr. 

6. 

Landing  Gcar-UP 

Landing  Flaps 

1000’  R.A. 

7. 

Stablllzerdmprop.  Set 

On  Ground 

Tg 

8. 

Other  A/C  Conflg-Unsafe 

Ldg.FlapsJL/or  On  Grnd. 

Tg&lOOO’  R.A. 

9. 

Flap  Placard-Exceeded 

Cont. 

Cont. 

10. 

Landing  Gear  Placard-Exceeded 

Cont. 

Cont. 

11, 

Engine  Thrust  Setting-Over  Limits 

Cont. 

Cont. 

12. 

Wheel  Well  Fire 

Cont. 

Cont. 

13. 

APU  Fire 

Cont. 

Cont. 

14. 

Radio  Altimeter 

Cont. 

Cont. 

Level  II 

Visual 

Audio 

B.) 

Ai^t. 

Alert  (Optional) 

1. 

Hydraulic  Press.  & Quant-Low 

Cont, 

Cont.  After  Tg 

m t 

Engine  Oil  Press.  & Quant-Low 

Cont. 

Cont,  After  Tg 

3. 

Essential  Elect.  Pwr-Fall 

Cont. 

Cont,  After  Tg 

*4. 

Auto-Pilot  & Autothrottle-Dlsconnect 

"Cont. 

♦Cont, 

5. 

Instr.  Comparntor  Sys-Alert 

Cont. 

Cont. 

6. 

Gyro  & Compass  Flugs-Vlsible 

Cont. 

Cont. 

7. 

Cabin  & Exterior  Doors-Not  Closed 

font. 

Cont.  After  Tg 

8. 

Pitot  Heat-Off 

Cont. 

Cont.  After  Tg 

9, 

Window  Heat-Off 

Cont. 

Cont.  After  Tg 

10. 

Anti-Skld-Off 

Coni. 

Cont.  After  Tg 

11. 

Engine  Fuel  Switch-Off 

Cont. 

Cont.  After  Tg 

12. 

CADC-Falled 

Cont. 

Cont. 

13. 

Niiv  System-Fulled 

Cont, 

Cont. 

Level  II 

Visual 

Audio 

C.) 

Alert 

Alert 

1. 

Emergency  Flap  Switch-Not  Off 

On  Ground 

None 

2. 

Rudder  & Spoiler  Swltch-Not  On 

On  Ground 

None 

3. 

INS-NotNuv 

On  Ground 

None 

I 
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4.  Yaw  D8tnpe^Not  On 

5 . Rudder  & Aileron  T rim-Not  Zero 

6.  Battery-Not  On 

7.  Compass  Cont-Not  Mag 

8.  Instr.  Transfer  Switch-Not  Norm 


On  Ground 

None 

On  Ground 

None 

On  Ground 

None 

Cont. 

None 

On  Ground 

None 

Level  III  (All  other  Items  that  have  less  effect  on  basic  safety  of  flight,  i.e.,  additional  checklist 
items) 


Visual 

Audio 

AM 

Aisri 

1. 

Emerg.  Exit  Lights-Not  Armed 

Cont. 

None 

2. 

Pneumatic  Brake  Press-Below  1200  psl 

Cont. 

None 

3. 

Static  Source-Not  Norm 

Cont. 

None 

4. 

Start  Levers*Not  as  Req’d 

Cont. 

None 

5, 

Gear  Pins>Not  Pulled 

Cont. 

None 

6. 

Air  Cond'Not  as  Req’d 

Cont., 

None 

7, 

Galley  Power-Not  as  Req'd 

Cont. 

None 

8. 

Beacon-Not  On 

Cont. 

None 

9. 

Parking  Brakes-Not  as  Req’d 

Cont. 

None 

10. 

Eng.  Fuel  Heat-Not  Off 

Cont. 

None 

11. 

No  Smoking  & Seat  Belts-Not  as  Req’d. 

Cont. 

None 

12. 

Anti-ice,  Engine-Not  Off 

Cont. 

None 

13. 

Smoke  Detector  System-Not  On 

Cont. 

None 

14. 

Ground  Start  Swltches-Not  Off 

Cont. 

None 

IS. 

Elect.  System-Not  Norm  (No  Lights) 

Cont. 

None 

*11  B.)4.  Two  pushes  on  Disconnect  button  cancels  warning 
•Tg  ■ Application  of  T.O.  Thrust  on  Ground 
*1000’  R.A,  ■ 1000  Ft,  Radio  Altitude  on  Approach 
Cent.  ■ Continuous  Monitor 
A/B  ■ Airborne 


Ftgun  1.  Sampit  Raadout  During  Engina  Start 


CAUTIOM  ■ARliiaS  SYSTEM 
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VIEWPOINTS  ON  DESIGN  OF  WARNING/CAUTION  SYSTEMS 

1.  GENERAL 

In  today’s  aircraft  aural  and  visual  wamings/cautions  have  proli- 
ferated to  an  extent  that  makes  it  difficult  for  the  pilot  to  distin- 
guish between  them.  It  is.  therefore,  desirable  to  centralize  the 
warnings  and  more  carefully  scrutinize  the  need  for  individual 
warnings  and,  v/here  needed,  make  them  more  explicit. 

In  order  to  minimize  nuisance  warnings,  the  warning  systems  should 
be  provided  with  loi^c  that  inhibits  the  warning  in  case  of  a techni- 
cal failure  in  the  system  or  tlie  stage  of  flight  is  such  that  a warning 
is  irrelevant  or  distracting,  for  example  a fire  warning  at  lift-off  or 
at  low  altitude  during  an  approach. 

2.  AURAL  WARNINGS 

Warnings  that  require  immediate  recognition  and  actions  shall  be 
aural,  each  using  a specific  sound  supplemented  by  a visiial  display 
and  preferably  also  by  voice. 

If  the  number  of  aural  warnings,  including  tactile  warnings,  exceeds 
7 they  must  be  supplemented  by  voice. 

Other  warnings  and  cautions  should  be  announced  by  a common 
sound  supplemented  by  voice  and/or  a visual  display. 

Aural  warnings  shall  be  loud  enough  to  be  heard  under  all  flight 
conditions  but  low  enough  not  to  interfere  with  cockpit  com- 
munication. 

3.  VISUAL  WARNINGS 

Warnings  and  cautions  should  be  presented  on  an  alphanumeric 
display  in  front  of  each  pilot. 

The  display  should  be  capable  of  'displaying  at  least  3 warnings 
simultaneously. 

The  light  Intensity  of  the  alphanumeric  display  should  be  manually 
adjustable  with  automatic  compensation  for  changes  in  cockpit 
light  level. 

Individual  lights  should  be  connected  to  a central  dimming  circuit. 
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Failures  in  redundant  systems  should  not  be  announced  as  warnings 
or  cautions  when  no  pilot  action  is  required.  Such  tailures  should 
be  shown  on  a system  status  display. 

Whenever  possible,  controls  that  must  be  actuated  in  case  of  a 
warning  should  be  illuminated  or  indicated  by  some  other  means. 

It  should  be  possible  to  clear  the  display  by  a push-button,  but  the 
warning  should  be  stored  in  a memory  as  long  as  it  persists  and  be 
redisplayed  in  case  of  a new  warning. 

It  should  be  possible  to  recall  warnings  from  die  memory  with  a 
recall  button.  A test  button  for  confidence  check  should  be 
provided. 

Since  it  Is  doubtful  that  all  individual  warning  and  caution  Il^ts 
can  be  eliminated  the  remaining  ones  should  have  dual  light  bulbs 
separated  by  a light  barrier  and  it  peripherally  located  they  should 
be  flashing. 

Instrument  failure  warnings  should  be  designed  in  such  a way  that 
the  affbcted  display  is  removed  or,  if  this  is  not  possible,  obscured 
by  a warning  flag.  Even  if  the  display  is  removed  a warning  Hag 
shall  be  displayed. 

SHORT  TERM  ACTION  ITEMS 

1.  Make  up  a proposal  for  a centralized  visual/aural  Integrated 
warning  system. 

2.  Enumerate  waminp  and  cautions  that  need  to  be  fed  to  the 
Central  Warning  system. 

3.  Define  inhibit  logics  that  are  necessary  to  minimize  nuisance 
warnings. 

STUDY  ITEMS 

Simulator  studies  should  be  made  to  determine  if  there  is  any 
benefit  to  be  gained  from  the  following  refinements. 

1 . Display  of  the  checklist  valid,  for  the  warning  condition,  on  a 
malfunction  display. 

2.  Automatic  execution  of  this  checklist  after  pilot’s  Initiation. 

3.  Schematic  display  of  failed  system  with  indication  of  failed 
and  usable  portion  of  system. 


.ij.i  jU-v JiL 


199 


F .4  ALTERNATE  SET  OF  ALERTING  FUNCTION  CATEGORY  CRITERIA  DEVELOPED  AT 

THE  BOEING  COMPANY 


Tid/ff  f *2  Ciutlon  §mf  Wtrnlng  Syttm  Concept 


AIRPLANE 

CONDITION  CRITERIA 

CATE- 

GORY 

CREW  RECOGNITION/ 
RESPONSE  TIME 

EXAMPLES  OP 
CONDITIONS 
OR  EVENTS 

.INTRINSICALLY 

HAZARDOUS 

1 

MINIMUM  CREW 
REACTION  TIME. 
WITHOUT  HESITATION 
OR  LOSS  OP  TIME. 
"IMMEDIATE” 

• STALL  WARN 

• GROUND  PROX 

• EMER  CABIN  ALT 
RATE/LEVEL 

EXTRIN8ICALLY 
HAZARDOUS.  THOSE 
WHICH  IN  THEMSELVES 
ARE  NOT  HAZARDOUS, 

BUT  ARE  KNOWN  THROUGH 
EXPERIENCE  TO  BE 
CONDITIONALLY 
HAZARDOUS. 

2 

DEFERRED  POSITIVE 
(PREDETERMINED 
COURSE  OF  ACTION! 

• EXCEED  '/mo/WmO 

• ENGINE  riRE 

• ENGINE  OIL 
PRES8./CITY  LOW 

3 

DEFERRED  CONDITIONAL 
(COURSE  OF  ACTION 
CONTINGENT  UPON 
OTHER  CONDITIONS! 

• PROBE  HEAT  INOP 

• WINDOW  HEAT  PAIL 

• HYD  PRIS88/QTY 

• GEN  DISCONNECT 

• A/T  DISC 

HAZARDOUS  UNDER  NO 
CONDITIONS.  SUPER- 
NUMERARY BY  NATURE. 

4 

ACTION  REQUIRED 
AT  NO  TIME 

• FLIGHT  RECORDER 
INOP 

• SELCAI. 

• STEW  CALL 

^DEVELOPED  BY  J.  OHLSON,  THE  BOEING  COMPANY,  1976 
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F,5  PAPERS  FROM  THE  SOTH  MEETING  OF  THE  SAE  S-7  COMMITTEE.  SEPTEMBER  1976 


WORKING  PAPER 

AN  INTEGRATED  AIRCRAFT  WARNING  SYSTEM 
FOR 

SAE  COMMITTEE  S-7 

I THE  DELIVERY  SYSTEM  AND  ITS  PHILOSOPHY 

A.  Ai  a {Int  itep  toward  evolving  a delivery  tyetem,  It  wai  neceiiary  to  enumerate  the  faults 

of  present  lyitemi. 

1.  Present  warning  systems  have  “grown  like  Topsy“  with  more  added,  It  seems,  each 
time  there  Is  an  accident,  The  result  has  been  a proliferation  of  discrete  aural  warnings 
to  the  extent  that  there  can  be  confusion  as  to  the  meaning  of  a speclHc  aural  warning, 
The  crew  must  first  determine  which  of  several  potential  problems  is  triggering  the 
aural  warning  being  heard  before  taking  action. 

2.  The  level  of  urgency  in  terms  of  flight  conditions  Is  not  presently  annunciated,  The 
crew  must  evaluate  this  level  to  determine  the  requirements  for  Immediacy  of  action 
and  division  of  attention  between  the  problem  and  conduct  of  the  flight, 

2,  Too  many  warninp  occur  during  normal  operational  conditions.  Any  warning  that  is 
heard  repeatedly  when  no  action  is  really  required  will  be  psychologically  “blocked 
out",  including  any  recollection  of  inlUbltlng  the  warning.  Even  if  the  warning  “gets 
through",  the  crew  mutt  still  determine  if  it  is  a real  or  a nuisance  wanting  before 
taking  action.  There  are  several  reasons  for  the  occurrence  of  warnings  In  normal 
conditions; 

a.  Faulty  design  logic 

b.  Poorly  considered  regulatory  requirements 

c.  Lack  of  retiabllity  resulting  in  nuisance  warnings 

4.  Noise  levels  of  existing  audio  warnings  may  be  so  high  and  so  annoying  as  to  degrade 
the  human  response  capability.  This  is  often  due  to  a regulatory  requirement  for  u 
minimum  decibel  limit  to  “get  attention",  which,  in  turn,  is  related  to  several  of  the 
problems  listed  above.  As  a spinoff  of  this  specific  problem,  an  inhibit  capability  is 
often  required  to  remove  the  raucous  audio  before  intelligent  action  can  be  taken. 

B.  In  seeking  solutions  to  existing  faults  in  warning  system  philosophy,  the  working  group 

was  able  to  construct  a model  of  a desirable  system, 

I.  To  replace  the  multi  .ide  of  uurut  warnings,  u single  unique  tone  should  be  utlli?.ed 
for  all  problems  requiring  aural  alert.  This  tone  should  be  complemented  by  a visual 
display,  and  oral  umumclutlon,  declaring  the  nature  and  location  of  the  problem. 
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2.  The  level  of  uraeney  should  be  annunciated  by  repeating  the  tone  one,  two  or  three 
times,  or  by  otherwise  modifying  the  tone  while  retaining  its  unique  nature.  Urgency 
level  sliould  also  be  annunciated  by  color  coding  of  the  message  on  the  visual  display, 

3.  Design  logic,  very  high  reliability,  and  regulatory  changes  must  be  created  to  eliminate 
the  problem  of  unnecessary  and  nuisance  warnings. 

4.  The  tone,  being  unique  and  meaningful  can  be  soft  and  non-irritating,  It  Is  believed 
that  its  very  uniquesness  and  dedication  will  allow  it  to  "cut  through"  ambient  noise 
because  crews  will  be  attuned  to  its  sound,  much  as  the  sound  of  an  engine  room  tele- 
graph will  raise  a ship  captain  from  the  deepest  sleep.  Having  heard  one  tone  the  crew 
will  be  immediately  attentive  to  see  If  a second  will  occur  and,  that  happening,  will  be 
doubly  attentive  for  a third.  We  do  not  wish  to  see  a button  required  to  inhibit  the 
tone  and  voice  warning.  Since  they  are  compelling  enough  to  get  attention  and 
specific  enough  to  spell  out  the  problem,  they  should  be  non-repetitive.  Any  require- 
ments for  recall  can  be  provided  for  by  the  visual  display. 

5.  Several  cases  came  up  where  our  design  philosophy  was  at  odds  with  present  regula- 
tion. In  order  to  achieve  the  optimum  logic,  the  group  elected  to  proceed  as  though 
there  were  no  regulatory  constraints,  This  may  soon  have  to  be  resolved. 

6.  It  was  argued  that  some  may  wish  to  retain  existing  discrete  audio  warnings  on  the 
grounds  that  they  have  withstood  the  test  of  time.  (The  fire  bell  Is  an  example.) 
Though  wishing  to  discourage  such  a prospect,  we  decided  to  Include  an  option  for 
a limited  number  of  discrete  aural  warnlnis  with  the  admonition  that  these  should 
be  kept  to  a minimum  and  used  only  for  the  highest  urgency  level. 

II  LEVELS  OF  URGENCY  (See  Table  One) 

A.  After  lengthy  discussion  it  was  concluded  that  four,  rather  than  three  levels  of  urgency 
would  be  needed.  This  concept  made  it  difficult  to  accommodate  the  levels  with  the 
desired  tone  repetitions  of  one,  two  and  three  times.  An  acceptable  solution  was  reached 
by  creating  a fourth  level,  zero,  to  be  the  lowest  level  of  urgency.  Thus,  level  zero  would 
have  no  au>Hl  tone,  no  visual  display  and  no  voice  annunciation.  Warning  would  be  pro- 
vided by  lights  much  as  they  exist  today. 

1,  Lfvel  III  would  be  described  as  emergency,  urgent  or  serious.  Action  required 
v/ould  be  Immediate.  Warning  would  be  provided  by  throe  aural  tones,  u visual  dis- 
play and  voice  annunciation  of  the  problem. 

2,  Level  II  would  be  described  us  caution  or  abnormal.  Action  required  would  be 
prompt.  Warning  would  be  provided  by  two  aural  tones  and  u visual  display,  with 
voice  annunciation  recommended. 

3,  Level  1 would  be  described  us  Irregular.  Action  would  be  required  but  may  be  defer- 
red. Warning  would  be  provided  by  one  aural  tone  and  a visual  display,  wilii  voice 
annunciation  optional, 
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4.  Level  Zero  would  be  described  as  aUvtsory.  Later  action  may  or  may  not  be 
required.  Warning  would  be  provided  by  visual  means,  such  as  a llg^t  or  flag. 

B.  The  various  warnings  are  categorized  by  urgency  level  In  tables  two  through  five.  Some 
points  of  diicuislon  follow: 

1 . Decision  height,  selcal,  and  cabin  call  alerts  present  a special  problem.  By  nature 
they  are  of  the  lowest  priority  level,  but  placing  these  in  level  Zero  would  deprive 
them  of  aural  alerting.  If  they  are  placed  in  level  I,  then  the  aural  tone  would  be 

, applied,  but  we  would  be  violating  our  philosophy  of  having  no  warnings  for  normal 

conditions.  To  create  a discrete  aural  sound  for  these  conditions  is  one  solution,  but 
would  add  an  extra  audio.  This  needs  farther  discussion. 

2.  The  ground  proxlmlty/hlgh  sink  warning  has  been  Included  in  the  three  higher  levels 
to  account  for  different  flight  conditions.  This  was  not  unanimous  and  the  logic  for 
this  problem  needs  further  exploration. 

3.  We  have  assigned  low  urgency  level  (level  1)  to  a CADC  failure,  although  such  a fell* 
ure  has  ilsr  reaching  significance,  The  rationale  for  this  is  that  several  other  failure 
warnings  would  be  displayed  simultaneously  in  case  of  a CADC  failure.  Some  of 
these,  such  as  autopilot  disconnect,  have  a higher  urgency  level. 

4.  The  warnings  for  landing  gear  door  open  and  gear  not  properly  stowed  we  assigned 
to  level  Zero,  so  that  lights  presently  used  would  be  applicable  to  these  problems. 

5.  On  the  engine  over  limit  warning  for  level  11,  we  believe  the  annunciation  should  be 
simply  “engine  number  2 over  limit**.  The  crew  then  could  refer  to  their  engine 
Instruments  to  determine  which  parameter  is  over  limit. 

6.  On  the  Instrument  comparator  warning  for  level  I,  we  believe  we  should  have  the 
soft  aural  tone  and  the  visual  display  would  annunciate  the  parameter  that  Is  out  of 
order,  such  as  compass,  altitude  indicator,  etc, 

III  INHIBIT  AND  OTHER  LOGIC 

A.  In  some  cases  we  were  able  to  apply  logic  to  the  conditions.  In  many  other  cases,  the  con> 
slderations  were  so  complex  that  time  did  not  permit  our  completing  this  task.  Where  we 
assigned  logic  it  appears  in  the  tables  under  “remarks".  Much  work  remains  to  be  done  in 
this  area. 

B.  One  theory  that  was  agreed  to  is  that,  during  critical  flight  phases,  such  as  takeoff  and 
landing,  selective  Inhibits  should  be  applied  as  the  aircraft  approaches  the  most  critical 
point  until  at  that  point  perhaps  no  warning  would  be  given.  Then  the  inhibits  may  be 
selectively  removed  as  the  aircraft  progresses  toward  a less  critical  condition  so  that  all 
warnings  would  be  active  at  some  later  point. 

IV  PRIORITIES 

Time  permitted  assigning  priorities  only  to  level  III.  (Illustrated  by  A,  B,  and  C on  fable 
two.)  A great  deal  of  work  remains  to  be  done  on  this  task. 
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V OTHER  UNRESOLVED  ISSUES 


A.  Coniideration  must  be  given  to  the  efTects  of  radio  altimeter  failure,  both  on  dispatch  and 
warning  capability.  Much  logic  will  probably  be  based  on  radio  altitude. 

B.  Autopilot  malRinctions  and  their  effects  need  further  expansion. 

C.  There  is  a need  to  And  the  optimum  aural  tone  for  crew  alert.  Tape  samples  should  be 

constructed.  * 

D.  Some  philosophy  must  be  added  on  dimming,  cancellation  and  recall  of  the  visual  display. 
(Sture  Bostrom  has  done  some  work  on  this.) 

E.  The  precise  means  of  color-coding  the  visual  display  must  be  developed. 

P.  This  working  paper  must  be  hardened  and  worked  into  format  of  ARP  1 068. 


TABLE  ONE 


General  Syitem  Concepti 

1 . Aural  attention  getter 

-prefer  unique  tone  for  all  problemi 

-should  deflne  level  of  urgency  by  2 or  3 repetitions  or  by  slightly  modifying  tone 

-should  not  be  annoyingly  loud 

-should  not  require  silencing  (NON  repetitive) 

2.  Discrete  sounds  may  be  used  on  a aelective  basis 
-should  be  limited  in  number 

-suggest  for  moat  urgent  level  only 

3.  Checklist  Requirements  not  incorporated  (?) 

4.  Should  have  priority  system  which  Includes  phase  of  flight 

5.  The  visual  display  should  employ  colo^codlng  to  indicate  the  urgency  level  of  the  warning 
being  annunciation. 

6.  Consideration  should  be  given  to  inhibiting  certain  warnings  during  critical  phases  of  flight) 
such  as  takeoff,  low  approach,  etc. 

7.  In  some  cases  the  priority  system  should  inhibit  secondary  mode  wamlnp. 


Levels  of  Urgency 

III 

Emergency 

Urgent 

Serious 

Immediate  Action  Required 

(1)  Aural 

AG* 

(2)  Visual  (3)  Voice  Annunciation  Recommended 

II 

Caution 

Abnormal 

Prompt  Action  Required 

(1)  Aural 

AG 

(2)  Visual  (3)  Voice  Annunciation  Optional 

I 

Irregular 

Action  Required 

(1)  Aural 

AG 

(2)  Visual 

0 

Advisory 
(1)  Visual 

AG# 

May  Require  Action  Later 

"'Very  limited  number  of  discrete  aural  warnings  is  optional 
#Buch  as  light  or  flag 
AG  " attention  getter 
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TABLE  TWO 


LEVEL  III 


Typical  Problem 

(A)  install 

(B)  III  Ground  Prox/hi  aink 

(C)  III  A/P  - Inadvertent  dlioonnect 


Remarka 

Inhibited  on  ground 

(non  red  ayit.  St  below  500  R/A) 
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TABLE  THREE 


LEVEL  II 

Typical  Problem 
Engine  fire 

Engine  Failure  (cataatrophic) 

Degraded  takeoff  performance 
Overrotation  (rate  or  angle) 

Excessive  wind  aheur 

High  Cabin  alt. 

A/P  • Inadvertent  dlaconnect 

A/T  • Inadvertent  diiconneot 

Takeoff  Warning  (apoilen,  hi  lift  dev.,  brakei  atab.) 

Ground  prox/high  link 

Dev.  from  Aai.  Ait.  Mmo,  Vmo,  Tmo 

Cargo  compt. 

Pire/imoke 

A.P.U.  fire 
Galley  flre/amoke 
Wheel  well  fire 

Engine  over  limit 

Hydraulic  preaa./ciuant. 

Fit.  Inat.  power  failure 
Gear  unaafe  for  landing 


Remarks 
Phaae  of  flight 
Phase  of  flight 
Possible  future 
TakeotT 

Possible  fliture  below  1000*  RA, 

TO  or  APP 

10,000  ft. 

Non^redundant  ayst.  above  SOO'  RA 

Early  speed  warning  (60  KGS) 

Logic  to  be  determined 

Regulatory  consideration! 

only  where  cockpit  action  is 
possible 

only  where  cockpit  action  is 
possible 

Appropriate  parameters  for  eng. 
first  limit 

single  syst.  remaining 
Where  manual  switching  req. 

Logic  to  be  determined. 


TABLE  FOLA 


LEVEL  1 

Excessive  rate  of  change  of  cabin  press. 

Instrument  warning 
Prognosis  of  wind  shear  potential 
Lavatory  fire/smoke 

Hydraulic  press./quan.  Multiple  systems  remaining 
Engine  oil  press./quan. 

night  Inst,  power  failure  where  syit.  restoration  is  automatic 
Inst,  comparator  alert 
CADC  failure 

Inadvertent  stabilizer  in  motion 
Ground  prox./hlgli  sink 
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TABLE  FIVE 


LEVEL 0 

A/P  in  reversion  (i.e.,  Turb  Mode,  etc.) 

y 

/ Navigation  system  fail  (recommend  to  sys.  designers  that  if  a guidance  input  has  failed  that  the 
appropriate  command  bar,  etc.,  be  removed  from  view  ARP  1068) 

Antiskid  off/fall  (if  this  item  were  on  Level  I could  eliminate  from  the  approach  checklist) 

Radio  altimeter  failure 

Gyro  or  compass  flag  visible 

Exterior  doors  not  closed 

Yaw  damper  fail 

Instrument  transfer  switch  not  normal 
Landing  gear  door  open 
Gear  not  properly  stowed 
Autopilot  stabilizer  out  of  trim 
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r'liiiif  e mit 


Capt.  B.  Schmitt 


September  15  th,  1976 


WORKING  PAPER 

AN  INTEGRATED  AIRCRAFT  WARNING  SYSTEM 
SAE  - COMMITTEE  S-7 
Comments  on  the  above  Working  Paper 

I THE  DELIVERY  SYSTEM  AND  ITS  PHILOSOPHY 


A. 

Item  2:  I am  of  the  opinion  that  using  the  MASTER  WARNING/MASTER  CAUTION  sys- 

tem, as  installed  in  most  of  the  present  day  aircraft,  the  level  of  urgency  is  annun- 
ciated - maybe  not  optimal  but  at  least  usable.  As  a consequence,  two  different 
kind  of  checklists  exist,  namely  the  EMERGENCY  CHECKLIST  and  the  MAL- 
FUNCTION OR  ABNORMAL  CHECLIST. 

Item  3;  I fully  agree;  too  high  a noise  level  can  even  lead  to  a wrong  decision. 


Item  1/2: 1 fully  support  the  statement  that  too  many  aural  warnings  are  used  today. 

Instead  of  repeating  the  tone  once,  twice  or  three  times,  I suggest  that  we  look  into 
the  aural  warning  as  used  on  the  French  Caravelle,  e.g.,  I could  think  of  using  one 
tone  for  Level  II,  but  a GING/GONG  type  tone  for  Level  III,  etc.  I am  pretty  sure 
that  this  would  be  more  suggestive  than  always  repeating  the  same  tone. 

Item  3-5:  No  comment. 

Item  6:  During  evaluation  of  the  present  waminp  it  also  occurred  to  me  that  a discrete 

audio  warning  is  in  certain  cases  a must,  e.g,, 

• DH  aural  warning 

• SELCAL 

• CABIN  to  COCKPIT,  etc. 

Since  these  tones  are  routinely  heard,  the  meaning  is  well  understood. 
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II  LEVELS  OF  URGENCY 


Item  1-4:1  generally  agree,  but  I suggest  that  the  present  philosophy  of  having  a lot  of  recall 
or  memory  Items  should  be  reviewed.  The  only  memory  item  we  have  retained  at 
SMSSAIR  is  the  EMERGENCY  DESCENT.  All  other  items  may  only  be  performed 
using  the  EMERGENCY  Checklist  except  for  the  2-man  cockpit.  Only  this  guaran* 
tees  that  the  right  action  is  performed  in  the  correct  sequence. 

It  may  be  worthwhile  to  convince  the  FAA  to  review  their  philosophy. 


Item  1:  Based  on  my  experience,  I think  that  it  will  be  very  difficult  to  delete  the  aural 

warning  for  DH,  especially  with  regard  to  CAT  II/CAT  III  A operation,  where  the 
DM  is  a very  linportant  element  for  decision  making.  Also  Selcal  as  well  as  the 
Cabin  to  Cockpit  call  • even  routine  calls  for  a discrete  aural  signal  unless  somebody 
has  a really  good  solution. 

Item  2;  GPWS.  If  a warning  occurs,  this  at  least  calls  for  investigation.  Therei'ore,  it  might 
not  be  necessary  to  put  logic  In,  in  order  to  identify  phase  of  flight.  Of  course  this 
can  differ  from  company  to  company  and  may  also  depend  on  whether  the  warning 
‘TERRAIN"  or  the  order  "PUt.L-UP"  has  been  selected. 

Item  3:  No'fibmments 

■ » 

Item  4:  Agreed. 

Item  Si  The  present  used  '‘ove^llmit”  light  in  the  respective  engine  instrument  has  been 
proved  to  be  a good  idea.  So  I think  it  could  be  deleted  from  the  warning  system. 

Item  6:  Needs  further  discussion. 

Ill  INHIBIT  AND  OTHER  LOGIC 

A.  B.  Agree. 


IV  PRIORITIES 


See  comments  on  Tables. 
V OTHER  UNRESOLVED  ISSUES 


A.  Agreed;  fortunately  the  newest  brand  of  radio  altimeters  has  a very  hlgli  reliability 
and/or  MTBF. 

B.  > E.  Agree. 


TABLE  ONE 


No  comments  at  present. 

TABLE  TWO  LEVEL  III 

(A)  Stall:  Aural  warning  is  Just  enough.  I don’t  think  that  voice  warning  and  visual  display  are 

necessary. 

The  stall  warnings  today  were  mostly  a result  of  improper  crew  procedure,  e.g., 
flaps/slats  retraction  at  wrong  speed,  erroneous  approach  speed,  wrong  conflgura* 
tion,etc.,etc., 

I suggest  that  the  industry  heinvited  to  study  a design  which  tackles  the  problem  at 
its  rp9t,  c.g.,  speed  command  system  with  floor  speed  for  approach  and  takeoff 
with ' full  time  redundant  autothrottles  as  a standard  equipment.  Inliiblt  logic  to 
avoid  flaps/slats  retraction  at  too  slow  speeds,  etc. 

I think  that  a lot  of  wakings  could  be  eliminated  if  the  system  were  to  be  properly 
designed. 

(B)  ;No  comment.  , 

(C)  A/P  • Inadvertent  disconnect  (non  red.  system  & below  R/A) 

■ I ■ ! . . ,1  ■ , . . . , ' 

During  this  phase  of  the  flight  the  crew  li  much  more  alert  than  in  cruise.  Do  we 
really  need  ^ tohes/voiae/vituar  dtiiplay  at  this  very  critical  point?  If  the  answer  is 
No:,  thdh  we  are  back  to  a discrete  autopilot  disconnect  signal  • aural  or  visual! 

TABLE  THREE  LEVEL  II 

-Over-rotation  Is  another  example  where  a speed  command  system  for  take-off  may 
help.  No  warning  but  proper  design! 

-Otherwise  no  comments  yet. 

TABLE  FOUR  LEVEL  I 

No  comments. 

TABLE  FIVE  LEVEL  0 


No  comments. 


APPENDIX  G 


APPLICATION  OF  ALERT  PRIORITIZATION 
SCHEME  TO  A 737  AIRCRAFT 

This  appendix  provldei  a tabulation  of  the  priority  levels  that  each  alerting  function  on  a 737  ai^ 
craft  might  be  assigned  by  the  proposed  prioritization  criteria.  The  alert  levels  specified  for  each 
flight  phase  correlate  with  the  categories  defined  in  table  14.  A dash  in  these  columns  indicates  that 
the  alert  it  (1)  not  required  in  that  flight  phase  or  (2)  should  be  Inhibited  ip  that  flight  phue. 


ALERT  LEVEL  AS  FUNCTION  OF  FLIGHT 


2GREEN  LIGHTS 


ALERT  LEVEL  AS  FUNCTION  OF  FU 


FLIGHT  PHASE 


ALERT  LEVEL  ASF 


ALERT  LEVEL  AS  FUNCTION  OF 


ALERT  LEVEL  AS  FUNCTION  OF 


ALERT  LEVEL  AS  FUNdlON  OF  FLIGKT 


ALERT  LEVEL  AS  FLWiCTION  OF  FUGHT 
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BEST  AVAILABLE  COPY 
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BEST  AVAILABLE  COPY 


1063 


235 


BEST  AVAILABLE  COPY 


Pollack  A ffdined  can  <denh<y  '*0  60  sounds  pffSJ'ntKj 

1962  individually  Howevef,  subitUs  could  nnly  ideniily  6 

to:  Rs  which  dilfeced  only  in  lre(juencv 


H 


APPENDIX  I 


TEST  PLANS  FOR  ADDITIONAL  HUMAN  FACTORS  TESTS  REQUIRED 
TO  COMPLETE  DEFINITION  OP  AND  VALIDATE  RECOMMENDED 
ALERTING  SYSTEM  DESIGN  STANDARDS 
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TITLE: 


CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 
VISUAL  SYSTEMS 


VARIABLES:  SIGNAL  BRIGHTNESS  x SIGNAL  STYLE  x PILOT  WORKLOAD  x AMBIENT 
LIGHT  LEVEL 

PROBLEM:  The  effectiveness  of  any  visual  caution  and/or  warning  system  is  dependent  on  the 

detection  and  correct  interpretation  of  the  signals  by  the  user.  Information  is 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES: 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signal  detection. 

II  Provide  dellnltlve  data  on  the  effect  of  sign»i  brightness,  signal  style,  pilot  workload  and 
. ambient  light  Intensity  on  the  detection  of  vUual  caution  and  warning  signals. 

HI  Determine  the  impact  of  these  flndings  on  system  design  and  standardization. 

OUTPUT/PRODUGti 

Comparatlvo  jpilot  performance  data  on  visual  caution  and  warning  signals  which  differ  as  a function 
of  style  and  ^rlgtitness.  Interactions  of  different  signals  with  the  surrounding  light  and  the  amount 
of  pilot  workload.  Recommendations  on  signal  requirements  and  design  speclflcations. 

DATA  MEASUREMENTS: 

The  measure;nents  will  describe  the  time  it  takes  a pilot  to  detect  a signal,  tne  time  to  respond  to 
the  signal,  the  accuracy  of  both  detection  and  response,  and  a subjective  evaluation  of  the  aesthetic 
value  of  each  of  the  signals. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  caution  and  warning  signal  detection 
performance  in  a cockpit  environment.  The  measurements  will  be  taken  in  a simulated  aircraft 
cockpit  using  two  different  siyles  (positive  & negative)  and  four  different  brightness  levels  for  the 
signal  (O.IS  to  ISO  ft>L).  The  cockpit  environment  will  also  be  changed  with  respect  to  the  ambient 
lighting  (0  to  7000  ft  L). 

To  simulate  the  circumstance  surrounding  the  pilot  in  an  actual  aircraft  environment,  the  pilots  will 
be  Assiped  flight  related  tasks  (i.e.,  IFR  flight)  to  accomplish.  The  workload  Imposed  by  these  tasks 
will  have  three  levels  (high,  medium,  low),  and  the  appearance  of  the  caution  and/or  warning  sipals 
will  occur  simultaneously  with  the  flight  tasks. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  selection  of  style  and 
brightness  for  caution  and  warning  sipal  lights  to  be  used  under  different  lighting  and  workload 
conditions. 
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TITLE;  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  • 
VISUAL  SYSTEMS 

VARIABLES;  sioNAl  BRIGHTNESS  x SIGNAL  LOCATION  x FLASH  RATE  x PILOT 
WORIO-OAD 

Pl^bBtEM:  , Th(|  «fI^ptiyerteM  of  any  viiutl  caution  and/or  warning  system  is  dependent  on  the 

the  signals  by  the  user.  Information  h 
' detection  perfortnance  and  design 


: , I , Auinfiept  the  existing  data  base  of  information  on  caution  and  warning  sijitnal  detection. 

II  Provide  deRnitive  data  on  the  effect  of  signal  brightness,  signal  location,  signal  flash  rate, 
and' pitot  workload  pn  the  detection  of  visual  caution  and  warning  signals.' 

^ '<,'i  • ■, . I ' 

Ur  Determine  the  impact  ^f  these  findings  on  system  design  and  standardization. 

, , ' "i’' . V ' ’ ' 

OUTPUt/PRODCCT; 

V.  ' , ■■■,'■  '■  ■ - ■' 1.  . . , , 

Cpmr>arative  pilot  performance  data  on  caution  and  warning  signals  which  differ  as  a ihnction  of 
biigh^ietli^  location  and  flash  rsite,  Interactions  of  different  signals  with  the  amount  of  pilot  work* 
’ ' load.  Racomihehdatlbhs  bii  signil  requlrementa  and  deidgn  specifications. 

DATAHfEASUEEMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  a signal,  the  time  to  respond  to 
the  signal,  the  accuracy  of  both  detection  and  response  and  a subjective  evaluation  of  the  aesthetic 
value  ot  the  signal. 

TEST  APPROACH! 

This  effort  will  develop  empirical  statistical  data  describing  caution  and  warning  signal  detection 
performance  In  an  actual  cockpit  environment.  The  ireasurements  will  be  taken  in  a simulated  air- 
craft cockpit  using  either  steady  or  flashing  signals  of  three  different  brightness  levels  (1.5  to  150 
ft-L)  at  three  locations  (0^,  1 5°,  and  45°  horizontal  displacement  from  the  pilot’s  centerline  of 
vision).  In  an  attempt  tq  simulate  the  circumstances  surrounding  tiie  pilot  in  an  aircraft  environ- 
ment, the  pilots  will  be  assigned  flight  related  tasks  (i.e.,  IPR  flight)  to  accomplish.  The  workload 
imposed  oy  these  tasks  will  have  three  levels  (high,  medium,  and  low).  The  appearance  of  the  cau- 
tion and/or  wamlns  signals  and  the  flight  tasks  will  occur  slmuUantously. 

The  data  from  this  study  will  be  vised  to  make  recommendations  on  the  selection  of  location, 
brlglitiiess  and  flash  rate  for  caution  and  warning  signal  lights  to  be  used  under  different  workload 
conditions. 
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TITLE:  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

VISUAL  SYSTEMS 

VARIABLES;  SIGNAL  BRIGHTNESS  x SIGNAL  LOCATION  x NUMBER  OF  DISTRACTING 
SIGNALS  X AMBIENT  LIGHT  LEVEL 

PROBLEM;  The  effectlveneii  of  any  vliual  oiutlon  tnd/or  warning  lyitem  ii  dependant  on  the  / 
deteotlon  and  correct  interpretation  of  the  lignali  by  the  uier,  Information  ijr^ 
required  on  the  effect  of  certain  variablee  on  detection  performance  and  deel| 
conitrainti  produced  by  theie  variablei. 

TEST  OBJECTIVES; 

I Augment  the  exiitlng  data  baee  of  Information  on  caution  and  warning  eignal  detection. 

II  Provide  definitive  data  on  the  effect  of  aignal  brightneei,  eignal  location,  numb^  of  die- 

tractlng  ilgnali  and  the  brightneei  of  the  ambient  light  on  the  detection  of  viiuu  caution 
and  warning  ilgnila.  / 

I 

III  Detarmlna  the  impact  of  theee  flndinp  on  lyatem  dailgn  and  etandardliatlony/ 

OUTPUT/PRODUCT;  / 

Comparative  pilot  performance  data  on  caution  and  warning  lignali  which  differ  ai  Ruction  of  loca- 
tion and  bri^tneii.  Interaction!  of  different  lignale  with  dlitracting  ilgnali  and  the  brightneei  of 
the  ambient  light.  Recommendatloni  on  ilpal  requirementa  and  deilgn  ipeclfioattoiii. 

DATA  MEASUREMENTS;  / 

/ 

Ihe  meaiuramenti  will  deicrlbe  the  time  it  takei  a pilot  to  detect  a elpal,  the  time  to  reipond  to 
the  elpal.  the  accuracy  of  both  detection  and  reeponie,  and  a eubjective  evaluation  of  the  aeithetie 
value  of  each  of  the  alpali. 


TEST  APPROACH; 


Thii  effort  will  develop  empirical  itatiitioal  data  deeorlbing  caution  and  warning  elpal  detection 
performance  in  an  actual  cockpit  environment.  The  meaauremente  will  be  taken  in  a ilmulated  al^ 
craft  cockpit  uilng  ilgnali  of  two  different  brlghtneiiei  (15  and  150  ft-L)  at  three  different  loca- 
tloni  (0^,  15^,  and  45^  horiaontal  dleplacement  from  the  pilot*!  centerline  of  viilon).  Distribution 
will  be  created  by  using  three  different  numbers  of  similar  lights  (0.  10,  20  lights  differing  only  in 
color  and  format)  placed  in  a circular  area  around  the  signal  with  a diameter  of  30^  visual  angle. 
During  the  test  the  cockpit  will  be  changed  with  respect  to  the  ambient  lighting  (approximately  0 
to  7000  ft-L).  In  an  attempt  to  simulate  the  circumstances  surrounding  the  pilot  in  an  aircraft 
environment,  the  pilot  will  be  aesiped  a flight  related  task  (i.e.,  IPR  flight)  of  medium  workload  to 
accomplish  simultaneously  with  detecting  sipals. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  selection  of  location  and 
brigtitneis  for  caution  and/or  warning  signals  to  be  used  under  different  levels  of  ambient  lighting 
and  distracting  conditions, 
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TITLE:  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

VISUAL  SYS!  EMS 

VARIABLES;  FALSE  SIGNALS  x FREQUENCY  OF  OCCURRENCE  x NUMBER  OF  DIS- 
TRACTING SIGNALS  X WORKLOAD 

PROBLEM:  The  effectlveneii  of  any  vliual  caution  and/or  warning  lyitem  ii  dependent  on  the 

detection  and  correct  Interpretation  of  the  signali  by  the  uier.  Information  it 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES; 

I Augment  the  existing  data  bate  of  information  on  caution  and  warning  signal  detection, 

II  Provide  definitive  data  on  the  effect  of  false  signals,  frequency  of  occurrence  pilot  work- 
load and  the  number  of  distracting  signals  on  the  detection  of  visual  caution  and  warning 
signals. 

III  Determine  the  Impact  of  these  findings  on  system  design  and  standardization. 
OUTPUT/PRODUCf: 

Comparative  pilot  performance  data  on  caution  and  warning  signals  when  the  surrounding  environ- 
ment Is  changing  at  a function  of  false  signals  and  the  number  of  distracting  signals.  Interactions  of 
the  environment  with  the  amount  of  pilot  workload  and  the  frequency  of  signal  occurrence. 
Recommendations  of  signal  requirements  and  deti^  specifications. 

DATA  MEASUREMENTS; 

The  measurements  will  describe  the  time  It  takes  a pilot  to  detect  a signal,  the  time  to  respond  to 
the  signal  and  the  accuracy  of  the  detection  and  responee. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  caution  and  warning  signal  detection 
performance  in  an  actual  cockpit  environment.  The  measurements  will  be  taken  in  a simulated  ai^ 
craft  cockpit  using  a signal  of  moderate  intensity  (SO  ft-L).  This  signal  will  indicate  a valid  warning 
either  lOO,  80,  or  60  percent  of  the  time  and  will  be  activated  at  either  1 , 2 or  S minute  (i30  sec) 
intervals.  Distraction  will  be  created  by  using  .1  different  numbers  (0,  10  and  20)  of  similar  (dif- 
fering only  in  color  and  format)  lights  placed  in  a circular  area  around  the  signal  with  a diameter  of 
30°  visual  angle.  To  simulate  the  circumstances  surrounding  the  pilot  in  an  aircraft  environment  the 
pilots  will  be  assigned  flight  related  tasks  (l.e.,  IFR  flight)  to  accomplish.  The  workload  imposed  by 
these  tasks  will  have  3 levels  (high,  medium  and  low).  The  appearance  of  the  caution  and  warning 
signals  and  the  flight  tasks  will  occur  simultaneously. 

The  data  from  this  study  will  provide  guidelines  for  controlling  the  environment  into  which  a cau- 
tion and  warning  signal  light  is  placed  and  an  assessment  of  the  effect  of  uncertainty  and  workload 
on  these  situations. 
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TITLE:  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  NON-VERBAL  SYSTEMS 

VARIABLES:  NUMBER  OF  DIFFERENT  SIGNALS  x FREQUENCY  OF  OCCURRENCE  x 
WORKLOAD 

PROBLEM:  The  effectlveneis  of  any  auditory  caution  and/or  warning  syitem  Is  dependent  on 

the  detection  and  correct  Interpretation  of  the  signals  by  the  user.  Information  Is 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES: 

I Augment  the  existing  data  base  of  Information  on  caution  and  warning  signal  detection. 

II  Provide  definitive  data  on  the  effect  of  the  number  of  different  signals,  frequency  of 
occurrence,  and  pilot  workload  on  the  detection  of  auditory  non-verbal  caution  and 
warning  signals. 

III  Determine  the  Impact  of  the  findings  on  system  design  and  standardization. 
OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  caution  and  warning  signals  which  differ  as  a function  of 
number  and  frequency.  Interaction  of  different  signals  with  the  amount  of  pilot  workload.  Recom- 
mendations on  signal  requirements  and  design  specifications. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  a signal,  the  time  to  respond  to 
the  signal  and  accuracy  of  the  detection  and  response. 

TEST  APPROACH! 

I 

This  effort  will  develop  empirical  statistical  data  describing  caution  and  warning  signal  detection 
performance  In  an  actual  cockpit  environment.  The  measurements  will  be  taken  In  a simulated  8i^ 
craft  cockpit  using  a 747  aural  warning  box  to  provide  discrete  caution  and  warning  signals.  The 
pilots  will  learn  to  perform  specific  responses  to  a number  of  sounds  (either  5, 10  or  IS)  and  will  be 
presented  each  sound  immediately  after  training  for  a baseline  measure  and  then  again  at  24  hours 
and  at  72  hours.  To  simulate  the  circumstances  surrounding  the  pilot  In  an  aircraft  environment  the 
pilots  will  be  assigned  flight  related  tasks  (l.e.,  IFR  flight  with  ATC)  to  accomplish.  The  workload 
Imposed  by  these  tasks  will  have  three  levels  (high,  medium,  and  low).  The  caution  and  warning 
signals  will  be  presented  simultaneously  with  the  flight  tasks. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  number  of  non-verbal  audi- 
tory caution  and  warning  signals  that  should  be  expected  to  be  correctly  Identified  under  different 
workload  conditions. 
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TITLE:  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  NON-VERBAL  SYSTEMS 

VARIABLES:  INTENSITY  x SIGNAL  TO  NOISE  RATIO  x TYPE  OF  BACKGROUND  NOISE  x 
WORKLOAD 


PROBLEM;  Tlie  effectiveneu  of  any  auditory  caution  and/or  warning  ayitam  Is  dependent  on 
the  detection  and  correct  interpretation  of  the  signals  by  the  user.  Information  is 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES: 

I Augment  the  existing  data  bate  of  infonriatlon  on  caution  and  warning  signal  detection. 

II  Provide  definitive  data  on  the  effect  of  slpal  Intensity,  signal  to  nplse  ratio,  pilot  work- 
load and  type  of  background  noise  on  the  detection  of  auditory  caution  and  warning 
signals. 

OUTPUT/PRODUtTi 

Comparative  pilot  performance  data  on  caution  and  warning  signals  which  differ  as  a function  of 
intensity  and  signal  to  noise  ratio.  Interactions  of  different  signals  with  type  of  background  noise 
and  the  amount  of  pilot  workload.  Recommendations  on  signal  requirements  and  design 
speolfioatlons. 

DATA  MEASUREMENTS: 

The  measurements  wUl  describe  the  time  it  takes  a pilot  to  detect  a signal,  the  time  to  respond  to 
the  signal  and  the  accuracy  of  the  detection  and  response. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  caution  and  warning  signal  detection 
performance  in  an  actual  cockpit  environment.  The  measurements  will  be  taken  in  a simulated  ai^ 
craft  cockpit  using  a 747  aural  warning  box  to  provide  discrete  warning  slpals.  Using  one  standard 
warning  signal  two  different  signal  Intensities  (80  dB  and  110  dB)  will  be  tested  at  three  different 
ilgnal  to  noise  intensity  levels  (-5, 0,  and  10  dB).  The  cockpit  environment  will  also  be  changed  with 
respect  to  the  type  of  background  noise  (aircraft  noise,  aircraft  noise  and  speech),  In  an  attempt  to 
simulate  the  circumstances  surrounding  the  pilot  in  an  aircraft  environment  the  pilots  will  be 
assigned  flight  related  tasks  (l.e„  IPR  flight)  to  accomplish.  The  workload  imposed  by  these  tasks 
will  have  three  levels  (high,  medium,  and  low)  and  the  signals  will  bo  presented  simultaneously 
with  the  flight  tasks. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  intensity  and  signal  to 
noise  ratio  for  non-verbal  auditory  caution  and  warning  signals  which  are  to  be  used  with  different 
types  of  background  noise  u.id  under  different  workload  conditions. 
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TITLE;  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  NON-VERBAL  SYSTEMS 

VARIABLES:  FALSE  SIGNALS  x FREQUENCY  OF  OCCURRENCE  x LOCATION  x 
WORKLOAD 

PROBLEM:  The  effectlveneu  of  any  auditory  caution  and/or  warning  system  is  dependent  on 

the  detection  and  correct  interpretation  of  the  signals  by  the  user.  Information  is 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES: 

I Augment  the  existing  data  base  of  information  on  caution  aitd  warning  signal  detection. 

II  Provide  definite  data  on  the  effect  of  signal  location,  false  signals,  pilot  workload  and 
frequency  of  signal  occurrence  on  the  detection  of  auditory  caution  and  warning  signals. 

in  Determine  the  impact  of  these  finding!  on  system  design  and  standardization. 

OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  the  location  of  the  sound  in  an  auditory  non«verbal  caution 
and  warning  system  when  the  surrounding  environment  is  changing  as  a function  of  the  number  of 
false  signals,  the  frequency  of  signal  occurrence  and  the  amount  of  workload  imposed  on  the  pilot. 
Recommendations  on  sipal  requirements  and  design  specification. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal  and  the  accuracy  of  the  detection  and  response. 

TEST  APPROACH; 

This  effort  will  develop  empirical  statistical  data  describing  caution  and  warning  signal  detection  in 
an  aircraft  environment.  The  measurements  will  be  taken  in  a simulated  aircraft  cockpit  using  a 747 
aural  warning  box  to  provide  discrete  c,nutlon  and  warning  signals.  A staitdard  aural  warning  signal 
will  be  presented  at  three  different  locations  (left,  right  and  behind)  and  at  1 , 2 or  5 minute  (±3  sec) 
intervals.  This  signal  will  signify  a valid  warning  either  100,  80  or  60  percent  of  the  time.  To  simu- 
late the  circumstances  surrounding  the  pilot  in  an  aircraft  environment  the  pilot  will  be  assigned 
flight  related  tasks  (i.e.,  IFR  flight  with  ATC)  to  accomplish.  The  workload  Imposed  by  these  tasks 
will  have  three  levels  (high,  medium  and  low).  The  signal  will  be  presented  simultaneously  with  the 
flight  task. 

The  data  from  the  study  will  be  used  to  make  recommendations  on  the  environment  in  which  dis- 
crete aural  warnings  can  be  used. 
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TITLE:  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  NON-VERBAL  SYSTEMS 

VARIABLES : LOCATION  x FALSE  SIGNALS  x TYPES  OF  BACKGROUND  NOISE  x 
NUMBER  OF  DIFFERENT  SIGNALS 


PROBLEM;  The  effectiveness  of  any  auditory  caution  and/or  warning  system  is  dependent  on 
the  detection  and  correct  interpretation  of  the  signals  by  th^  user.  Information  is 
required  on  the  effect  of  certain  variables  on  detection,  performance  and  design 
' constraints  produced  by  these  variables. 

TESt  OBJECTIVES: 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signal  detection. 

• • I . . ‘ , _ 

II  Provide  definitive  data  on  the  effect  of  signal  location,  false  signals,  types  of  background 
noise  and  number  of  different  signals  on  the  detection  of  auditory  and  warning  signals. 

III  Determine  the  impact  of  these  findings  on  system  design  ud  standardiration, 

OUTPUT/PRODUCT!  ' " 

Comparative  pilot  performance  data  on  the  location  of  sound  in  a auditory  non-verbal  caution  and 
warning  system  when  the  surrounding  environment  is  changing  as  a fitnOtlon  of  ^he  type  pi*  back- 
ground notse,  the  number  of  different  signals  and  the  number  of  false  signals  Recommendations  cm 
signal  requirements  and  design  specifloations. 

DATA  MEASUREMENTS: 


The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal  and  the  accuracy  of  the  detection  and  response 

TEST  APPROACH: 


This  effort  wili  develop  empirical  statistical  data  desenbing  caution  and  warning  signal  detection  in 
an  actual  cockpit  environment.  The  measurements  will  be  taken  in  a simulated  aircraft  cockpit  using 
a 747  aural  warning  box  to  provide  the  caution  and  warning  signals  The  pilots  will  learn  to  perform 
specific  responses  to  a number  of  discrete  warning  signals  (either  5, 10  or  15)  The  aural  warning  sig- 
nals will  be  presented  in  two  locations  (left,  and  behind)  and  will  be, a valid  warning  either  100, 80 
or  60  percent  of  the  time.  The  background  noise  will  either  be  aircraft  noise  or  aircraft  noise  com- 
bined with  speech.  To  simulate  the  circumstances  surrounding  the  pilot  in  an  aircraft  environment 
the  pilot  will  be  assigned  a flight  related  tusk  (i  e.,  IFR  flight)  of  medium  workload  to  .accomplish 
simultaneously  with  detecting  the  signals. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  environment  in  which  dis- 
crete aural  warnings  can  be  used. 
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TITLE;  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  VERBAL  SYSTEMS 

VARIABLES:  SIGNAL  INTENSITY,  SIGNAL  CONTENT,  TYPES  OF  BACKGROUND  NOISE 

PROBLEM:  The  effsctiveneis  of  any  verbal  caution  and/or  warning  syitem  li  dependent  on  the 

detection  and  correct  interpretation  of  the  algnals  by  the  user.  Information  li 
required  on  the  effect  of  certain  variablei  on  detection  performance  and  deilgn 
constraint!  produced  by  these  variables. 

TEST  OBJECTIVES; 

I Augment  the  existing  data  base  of  information  on  eaUtion  and  warning  signal  detection. 

* 

II  Provide  definite  jta  on  the  effect  of  signal  content,  signal  intensity,  and  types  of  back* 
ground  noise  on  the  detection  of  verbal  caution  and  warning  signals. 

III  Determine  the  impact  of  these  flndinp  on  system  design  and  standardization. 
OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  caution  and  warning  signals  which  differ  as  a fbnctlon  of 
content  and  intensity  1 2.nd  the  interactions  of  different  signals  with  the  types  of  background  noise. 
Recomrnendatlons  on  signal  requirements  and  design  speolfloatlons. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal,  the  accuracy  of  the  detection  and  response  and  a subjective  evaluation  of  the  aesthetic 
value  of  the  signals. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  verbal  caution  and  warning  signal  detec* 
tlon  and  interpretation  in  a cockpit  environment.  The  measurements  will  be  taken  in  a simulated 
aircraft  cockpit  using  a series  of  messages  which  will  have  been  previously  developed  and  classified 
as  to  their  intelligibility.  Messages  of  a medium  intelligibility  will  be  presented  al:  different  intensi- 
ties (80  and  105  dB)  with  the  signal  to  noise  ratio  being  held  constant  at  15  dB.  The  messages  will 
be  of  three  types;  (1)  one  or  two  keywords  with  short  presentation  time,  (2)  the  tame  messages  pre- 
ceded by  an  alerting  signal,  and  U)  sentences  with  longer  presentation  time.  The  background  sound 
will  be  either  aircraft  noise  or  aircraft  rtolte  combined  with  speech  (ATC  or  weather).  To  simulate 
the  circumstances  surrounding  the  pilot  in  an  actual  aircraft  environment  the  pilot  will  be  assigned  a 
flight  related  task  (i.e.,  IFR  flight)  of  medium  workload  to  accomplish  simultaneously  with  detec- 
ting and  interpreting' the  warning  signal. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  intensity  and  content  of 
verbal  warnings  which  are  to  be  used  with  different  types  of  background  sounds. 
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TITLE:  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  VERBAL  SYSTEMS 

VARIABLES:  SIGNAL  INTENSITY  x SIGNAL  CONTENT  x PILOT  WORKLOAD 

PROBLEM:  The  effectivenesi  nf  any  verbal  caution  and/or  warning  lystem  ii  dependent  on  the 

detection  and  coneot  interpretation  of  the  lignali  by  the  uier.  Information  ii 
required  on  the  effect  of  certain  vatlablei  on  detection  performance  and  design 
constraint!  produced  by  theie  wriablei. 

TEST  OBJECTIVES:  * 

I Augment  the  exlitlng  data  base  of  information  on  caution  and  gaming  lignai  detection. 

II  Provide  definite  data  on  the  effect  of  lignal  inteniity.  signal  eyntent,  and  pilot  workload 
on  the  detection  of  verbal  caution  and  warning  lignali. 

III  Determine  the  Impact  of  these  Endings  on  lyitem  design  and  jitandardlaatlon. 
OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  caution  and  warning  signalji  which  differ  as  a function  of 
intensity  and  content.  Interactions  of  different  sipals  with  the  amount  of  pilot  workload,  Recom* 
mendations  on  signal  requirements  and  design  speoiflcationt. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detejit  the  signal,  the  time  to  respond  to 
the  signal,  the  accuracy  of  the  detection  and  response,  and  a s)ubjective  evaluation  of  the  aesthetic 
value  of  the  signals, 


TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing 
tion  and  interpretation  in  a cockpit  environment.  The  mei 
aircraft  cockpit  using  a Series  of  messages  which  will  have 
as  to  their  intelligibility.  Messages  of  a medium  intelligibill 
105  dB  Intensity  with  a constant  signal  to  noise  ratio  of  1 S 


srbal  caution  an^  warning  signal  detec* 
lurements  will  be  taken  in  a simulated 
^een  previously  developed  and  classified 
level  will  be  presented  at  either  80  or 
IB. 


These  messages  will  be  of  three  types:  ( 1)  one  or  two  key  words  with  a short  presentation  time;  (2) 
the  same  messages  preceded  by  an  alerting  signal;  and  (3)  sentences  with  the  same  key  words  and 
a longer  presentation  time.  In  an  attempt  to  simulate  the  circumstances  surrounding  the  pilot  in  an 
actual  aircraft  environment,  the  pilots  will  be  assigned  flight  related  tasks  (l.e.,  IFR  flight)  to  acepm- 
plfsh  simultaneously  with  detecting  and  interpreting  the  warning  signals.  These  tasks  will  Impose 
three  levels  of  workload,  (high,  medium  and  low)  on  the  pilots. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  intensity  and  content  of 
verbal  warnings  which  are  to  be  used  under  different  workload  conditions. 
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TITLE;  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  ■ 

AUDITORY  VERBAL  SYSTEMS 

VARIABLES ; SIGNAL  INTENSITY  x VOICE  TYPE  x MESSAGE  INTELLIGIBILITY 

PROBLEM:  The  effectiveneu  of  any  auditory  caution  and/or  warning  ayitem  la  dependent  on 

tlie  detection  and  correct  Interpretation  of  the  ilgnala  by  the  uier.  Information  la 
required  on  the  effect  of  certdn  variablea  on  detection  performance  and  deaign 
eonatralnta  produced  by  theie  variablea. 

TEST  OBJECTIVES: 

I Augment  the  exlitlng  data  baae  of  information  on  caution  and  warning  detection. 

II  Provide  definitive  data  on  the  effect  of  lignal  Intenalty,  menage  Intelligibility  and  voice 
type  on  the  detection  of  verbal  caution  and  warning  algnali. 

III  Determine  the  Impact  of  these  finding  on  ayatem  deaign  and  standardliatlon. 
OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  caution  and  warning  algnali  which  differ  u a function  of 
intensity,  intelligibility  and  voice  type.  Recommendatloni  on  aignal  requirements  and  design 
speclfloationi, 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal,  the  accuracy  of  the  detection  and  response,  and  a subjective  evaluation  of  the  aesthetic 
value  of  the  signals. 

TEST  APPROACH; 

This  effort  will  develop  empirical  statistical  data  describing  verbal  caution  and  warning  signal  detec- 
tion and  Interpretation  in  a cockpit  environment.  The  meuurementi  will  be  taken  in  a siipulated 
aircraft  cockpit  using  a series  of  messages  which  will  have  been  previously  developed  and  classified 
as  to  their  intelligibility.  Meiiagei  of  three  intelligibility  levels  (high,  medium  and  low)  will  be 
presented  at  two  different  intensities  (80  and  105  dB)  with  a constant  lipal  to  noise  ratio  of  15 
dB.  Each  message  will  be  recorded  three  times,  once  using  a inale  voice,  once  using  a female  voice, 
and  once  using  a computer  generated  voice.  To  simulate  the  ciroumstanoes  surrounding  the  pilot  in 
an  actual  aircraft  environment,  the  pilot  will  be  aialgned  a flight  related  task  (l.e.,  IFR  flight)  of 
medium  workload  to  perform  simultaneously  with  detecting  and  Interpreting  the  warning  signals. 

The  data  from  the  study  will  be  used  to  make  recommendations  on  the  intensity,  intelligibility  and 
voice  type  of  verbal  warnings  which  are  to  be  used  in  an  aircraft  cockpit. 
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TITLE:  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  VERBAL  SYSTEMS 

VARIABLES;  SIGNAL  TO  NOISE  RATIO  x TYPES  OF  BACKGROUND  NOISE  x TYPE  OF 
VOICE 

PROBLEM;  The  effeotlveneu  of  any  verbal  caution  and/or  warning  lyitem  U dependent  on  the 
detection  and  correct  Interpretation  of  the  ilgnali  by  the  uier.  Information  li 
required  on  the  effect  of  certain  varlablei  on  detection  performance  and  design 
constraint!  produced  by  these  variables. 

TEST  OBJECTIVES; 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signal  detection. 

II  Provide  definitive  data  on  the  effect  of  voice  type,  signal  to  noise  ratio,  types  of  back* 
ground  noise  on  the  detection  of  verbal  caution  and  warning  signals. 

III  Determine  the  impact  of  these  findings  on  system  design  and  standardization, 
OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  caution  and  warning  signals  which  differ  as  a function  of 
voice  type  and  the  interactions  of  different  signals  with  the  signal  to  noise  ratio  and  types  of  back* 
ground  noise.  Recommendations  on  signal  requirements  and  design  specifioations. 

DATA  MEASUREMENTS  I 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal,  the  accuracy  of  the  detection  and  response,  and  a subjective  evaluation  of  the  aesthetic 
value  of  the  signal. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  verbal  caution  and  warning  signal  detec* 
tion  and  interpretation  in  a cockpit  environment,  llie  measurements  will  be  taken  in  a simulated 
aircraft  cockpit  using  a series  of  meuages  which  will  have  been  previously  developed  and  classified 
as  to  their  intelligibility.  Messages  of  a medium  intelligibtllty  will  be  presented  at  an  intensity  of  80 
dB  and  the  signal  to  noise  ratio  will  be  varied  in  three  levels,  (-3, 0 uid  10  dB).  Each  message  will  be 
recorded  three  timet,  once  using  a main  voice,  once  a female  voice,  and  once  a computer  generated 
voice.  The  background  sound  will  either  be  aircraft  noise  or  a combination  of  aircraft  noise  and 
speech  (ATC  or  weather).  In  an  attempt  to  simulate  the  circumstances  surrounding  the  pilot  in  an 
actual  aircraft  environment,  the  pilot  wilt  be  assiped  a flight  related  task  (l.e.,  IFR  flight)  of 
medium  workload  to  accomplish  simultoneously  with  detecting  and  interpreting  the  wanting  slpal. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  type  of  voice  presentation 
in  a verbal  warning  system  to  be  used  under  conditions  of  different  signal  to  noise  ratios  and  dif- 
ferent types  of  background  sound. 
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TITLE: 


CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 
AUDITORY  VERBAL  SYSTEMS 


VARIABLES;  MESSAGE  CONTENT  x MESSAGE  INTELLIGIBILITY  x FAMILIARITY  ^ 

WITH  MESSAGE  i 

i 

PROBLEM;  The  effectlvenem  of  any  auditory  caution  and/or  warning  system  is  dependent  on  i'; 

the  detection  and  correct  interpretation  of  the  signals  by  the  user.  Information  is  j 

required  on  the  effect  of  certain  variables  on  detection  performance  and  design  | 

constraints  produced  by  these  variables.  ^ 

I 

TEST  OBJECTIVES!  I 

4 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signals  detection.  I 

.■I 

II  Provide  definitive  data  on  the  effect  of  meuage  content,  message  intelligibility,  and  the  | 

pilot's  familiarity  with  the  messages  on  the  detection  of  verbal  caution  and  warning  I; 

signals.  i 

1 • .'« 
•■i 

III  Determine  the  impact  of  these  findings  on  system  design  and  standardization.  ^ 

T’ij 

OUTPUT/PRODUCT!  | 

Comparative  pibi  performance  data  on  caution  and  warning  signals  which  differ  as  a function  of  i ] 

content  and  intellli^billty  and  the  interactions  of  different  signals  with  the  pilot's  familiarity  with  I j 

the  messages.  Recommendations  on  signal  requirements  and  design  speoiflcatlons. 

'■  i 

DATA  MEASUREMENT:  | 

' i 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  reapond  to 
the  signal  ^nd  the  accuracy  of  the  detection  and  response. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  verbal  caution  and  warning  signal  detec> 

tion  and  Interpretation  in  a cockpit  environment,  The  measurements  will  be  taken  in  a simulated 

aircraft  cockpit  using  a series  of  verbal  messages  which  will  have  been  previously  developed  and 

classified  as  to  their  intelligibility.  Messages  of  three  intelligibility  levels  (high,  medium  and  low)  will 

be  presented  at  an  intensity  of  80  dB  and  a signal  to  noise  ratio  of  1 5 dB.  These  messages  will  be  of 

two  types:  (1)  one  or  two  key  words  with  a short  presentation  time;  and  (2)  sentences  with  the 

same  key  words  and  a longer  presentation  time,  Half  of  the  pilots  will  review  the  messages  before 

testing  to  familiarize  themselves  with  the  warnings,  'fho  other  half  will  not  be  introduced  to  the 

messages  until  testing.  To  simulate  the  circumstances  surrounding  the  pilot  in  an  actual  aircraft  ; 

environment,  the  pilot  will  be  assigned  a flight  related  task  (i.e.,  IFR  flight)  of  medium  workload  to  i 

perform  simultaneously  with  detecting  and  interpreting  the  warning  signals. 

The  data  from  this  study  will  he  used  to  make  recommendations  on  the  content  and  intelligibility 
of  verbal  warnings  which  are  to  be  used  in  an  aircraft  cockpit. 
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TITLE: ' CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 
AUDITORY  VERBAL  SYSTEMS 

VARIABLES:  SIGNAL  CONTENT  x SIGNAL  INTENSITY  x SIGNAL  TO  NOISE  RATIO  x 
NUMBER  OF  FALSE  SIGNALS 

PROBLEM:  The  effectlveneu  of  any  verbal  caution  and/or  warning  lystem  is  dependent  on  the 

detection  and  correct  interpretation  of  the  signals  by  the  user.  Information  is 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES: 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signal  detection. 

II  Provide  definitive  data  on  the  effect  of  signal  content,  signal  to  noise  ratio,  and  the  num- 
ber of  false  signals  on  the  detection  of  verbal  caution  and  warning  signals. 

ill  Determine  the  impact  of  these  ilndlnp  on  system'  design  and  standardization. 

OUTPUT/PRODUCTi 

Comparative  pilot  performance  data  on  caution  and  warning  signals  which  differ  as  a function  of 
content  and  signal  to  noise  ratio.  Interactions  of  different  signals  with  the  number  of  false  signals. 
Recommendations  on  signal  requirements  and  desiipt  specifications. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal  and  the  accuracy  of  the  detection  and  response. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  verbal  caution  and  warning  signal  detec- 
tion and  interpretation  in  a cockpit  environment.  The  measurements  will  be  taken  in  a simulated 
aircraft  cockpit  using  a series  of  messages  which  will  have  been  previously  developed  and  classified 
as  to  their  intelligibility.  Messages  of  a moderate  intelligibility  level  will  be  presented  at  an  intensity 
of  either  80  or  lOS  dB  with  a signal  to  noise  ratio  of  -3,  0,  or  10  dB.  The  messages  will  be  of  two 
types;  (1)  one  or  two  key  wordr  with  a short  presentation  time;  and  (2)  sentences  with  the  same 
key  words  and  a longer  presentation  time.  The  sipals  that  occur  will  be  valid  signals  either  100,  80 
or  60  percent  of  the  time.  To  simulate  the  circumstances  surrounding  the  pilot  in  an  actual  aircraft 
environment,  the  pilot  will  be  assigned  a flight  related  task  (l.e.,  IFR  flight)  of  medium  workload  to 
perform  simultaneously  with  detecting  and  interpreting  the  warning  signals. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  message  content  and  signal 
to  noise  ratio  for  verbal  caution  and  warning  messages  to  be  used  when  there  is  a possibility  of  false 
signals. 
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TITLE;  CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 

AUDITORY  VERBAL  SYSTEMS 

' « . ‘ ‘ 

VARIABLES:  INTELLIGIBILITY  OF  MESSAGE  x TYPES  OF  BACKGROUND  NOlSE  x 
FAMILIARITY  WITH  MESSAGES 

PROBLEM;  The  effectiveness  of  any  verbal  caution  and/or  warding  systeni  is  dependent  on  the 
detection  nnd  correct  interpretation  of  the  signals  by  the  user,  Information  is 
raquired  on  the  effect  of  certain  variables  on  detection  performance  and  design 
• constraints  produced  by  tlieu  variables, 

TEST  OBJECTIVES! 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signal  detection. 

II  Provide  definitive  data  on  the  effect  of  signal  intelligibility,  type  of  background  noise  and 
the  pilot’s  familiarity  with  the  messages  on  the  detection  of  verbal  caution  and  warning 
sign^s. 

III  Determine  the  Impact  of  these  flndlnp  on  system  design  and  standardization. 
OUTPUT/PRODUCT. 

Comparative  pilot  performance  data  on  caution  and  warning  slpals  which  differ  aa  a fiinction  of 
intelligibility.  Interactions  of  different  signals  with  the  type  of  background  noise  and  familiarity 
with  the  messages.  Recommendations  on  signal  requirements  and  design  speoifleations. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal  and  the  accuracy  of  the  detection  and  response. 

TEST  APPROACH: 


This  effort  will  develop  empirical  statistical  data  describing  verbal  caution  and  warning  signal  detec- 
tion and  interpretation  in  a cockpit  environment.  The  measurements  will  be  taken  in  a simulated 
aircraft  cockpit  using  a series  of  messages  which  will  have  been  previously  developed  and  classified 
as  to  their  IntelllRlbllity.  Messages  of  three  intelligibUity  levels  (high,  medium  and  low)  will  be  pre- 
sented at  an  80  dB  intensity  and  a signal  to  noise  ratio  of  15  dB.  The  background  sound  will  either 
be  aircraft  noise  or  a combination  of  aircraft  noise  and  speecii  (ATC  or  weather).  Half  of  the  pilots 
will  reWew  the  warning  messages  before  they  begin  the  test,  thus  familiarizing  themselves  with  the 
content.  The  other  half  will  not  be  introduced  to  the  messages  until  their  test.  In  an  attempt  to 
simulate  the  circumstances  surrounding  the  pilot  in  an  actual  aircraft  environment,  the  pilot  will  be 
assigned  a flight  related  task  (i.e.,  IFR  flight)  of  medium  workload  to  perform  simultaneously  with 
detecting  and  interpreting  the  warning  signal. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  content  and  Intelligibility 
needed  for  messages  to  be  given  with  different  types  of  background  noise. 
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TITLE; 


CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 
BIMODAL  SYSTEMS 

VARIABLES:  MODAL  PRIORITY  x SIGNAL  LOCATION  x DlFFERElf^tlAL  INTENSITY 

PROBLEM:  The  effectlyeness  of  any  bimodal  caution  and/or  waging  lyitem  ia  dependent  on 

the  detection  and  correct  interpretation  of  the  slgriiah  by  the  user.  InfOftnation  is 
required  on  the  effect  of  certain  varlablee  oh  detection  peifot^ance  diid  design 
j constraints  produced  by  these  Variables. 

TEST  OBJECTIVES:  ' " 

V VAugmerit  th^  existing  data  Ii'ise  Of  information  on  caution  aiid  waihtng  signal  detection. 

It  Provide  definitive  data  on  the'effect  of  signal  locatioh/ differential  intenrity  and  which 
signal  comes  first  on  the  detectlbh  of  visual  and  auditory  caution  and  warning  slghalti 

III  Determine  the  impact  of  these  findings  on  system  design  and  standardisation, 

;,6uTPUT/PRODUCT:  'h'' 

: Comparative  pilot  on  bimodal  caution  and  warning  signals  which  differ  as  a funo* 

^lon  of  the  tnodal  Priority  and  differential  signal  iritehlity.  Interactions  of  different  signals  with  the 
locarioh  of  the  signals.  Recommendations  on  signal  requirements  and  design  Bpeoifi'cations. 

DATA^MEASUREMENTSi 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  slgnti,  the  time  to  respond  to 
the  signal,  tiie  accuracy  of  the  detection  and  response  and  a subjective  evaluation  of  the  aesthetic 
value  of  the  slfinal. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  bimodal  caution  and  warning  signal 
detection  and  interpretatior  in  a cockpit  environment.  The  measurements  will  be  taken  in  a simu- 
lated aircraft  cockpit  using  both  visual  and  auditory  warnings.  The  spatial  location  of  the  two  sig- 
nals will  be  varied  so  that  either  the  two  signals  come  from  the  same  location  or  from  different 
locations.  The  intensities  of  the  two  signals  will  vary  such  that  both  signals  will  be  presented  at  a 
moderate  intensity  or  either  the  visual  or  auditory  signal  will  be  at  a high  intensity  and  the  other  at 
a low  intensity.  Finally,  the  order  in  which  the  signals  will  be  presented  will  differ  with  visual  being 
first  half  of  the  time  and  auditory  first  the  other  half.  To  simulate  the  circumstances  surrounding 
the  pilot  in  un  actual  aircraft  environment,  the  pilot  will  be  assigned  a fiiglit  related  task  (i.e.,  IPR 
flight)  of  moderate  workload  to  perform  simultaneously  with  detecting  and  Interpreting  the 
warning  signals. 

The  data  from  this  study  will  be  used  to  make  recommendutions  on  tnodal  priority,  signal  location 
and  intensity  for  bimodal  systems  to  be  used  in  the  cockpit. 
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TITLE: 


CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 
BIMODAL  SYSTEMS 


VARIABLES:  SIGNAL  LOCATION  x FALSE  SIGNALS  x WORKLOAD  x PILOT  AGE 


PROBLEM:  The  effectiveness  of  any  bimodal  caution  and/or  warning  system  is  dependent  on 

the  detection  and  correct  interpretation  of  the  signals  by  the  user.  Information  is 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES: 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signal  detection. 

II  Provide  definitive  data  on  the  effect  of  signal  location,  false  signals,  pilot  workload  and 
pilot  age  Intensity  on  the  detection  of  visual  and  auditory  caution  and  warning  signals, 

III  Determine  the  Impact  of  these  findings  on  system  design  and  standardization, 
OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  caution  and  warning  signals  which  differ  as  a function  of 
location  and  number  of  false  signals,^  Interactions  of  different  signals  with  the  pilot  age  and  the 
amount  of  pilot  workloads.  Recomm'endations  on  signal  requirements  and  design  spedncations. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal,  and  the  accuracy  of  the  detection  and  response. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  bimodal  caution  and  warning  signal 
detection  and  interpretation  in  u cockpit  environment.  The  measurements  will  be  taken  in  a simu- 
lated aircraft  cockpit  using  both  visual  and  auditory  warnings.  The  spatial  location  of  the  two  sig- 
nals will  be  varied  so  that  they  either  come  from  the  same  place  or  from  at  least  90^  apart.  The 
auditory  signal  will  always  be  presented  first  and  be  the  alerting  signal  to  the  primary  visual  signal. 
The  visual  signal  will  be  a valid  warning  100, 80  and  60  percent  of  the  time.  Pilots  will  be  classified 
as  to  their  age  (over  40  and  under  40).  To  simulate  the  circumstances  surrounding  the  pilot  in  an 
actual  aircraft  environment,  the  pilot  will  be  assigned  flight  related  tasks  (i.o.,  IFR  flight)  to  pe^ 
form  simultaneously  with  detecting  and  interpreting  the  warning  signal.  These  tasks  will  be  one  of 
three  workload  levels  (high,  medium  or  low). 

The  data  from  this  study  will  be  used  to  make  recommendations  on  signal  location  for  bimodal  sys- 
tems to  be  used  under  different  workload  conditions  by  pilots  in  different  age  groups. 
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TITLE: 


CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  - 
BIMODAL  SYSTEMS 


VARIABLES:  MODAL  PRIORITY  x INTERSTIMULUS  INTERVAL  x SIGNAL  DURATION  x 
PILOT  WORKLOAL 

PROBLEM:  The  effectiveneis  of  any  blmodal  caution  and/or  warning  lyitem  is  dependent  on 

the  detection  and  correct  Interpretation  of  the  signals  by  the  user.  Information  is 
required  on  the  effect  of  certain  variables  on  detection  performance  and  design 
constraints  produced  by  these  variables. 

TEST  OBJECTIVES: 

I Augment  the  existing  data  base  of  information  on  caution  and  warning  signal  detection. 

II  Provide  definitive  data  on  the  effect  of  the  interval  between  the  two  signals,  which  signal 
comes  first,  the  duration  of  the  signals,  and  the  pilot  workload  on  the  ddtectlon  of  visual 
and  auditory  caution  and  warning  signals. 

III  Determine  the  Impact  of  these  findings  on  system  design  and  standardization. 
OUTPUT/PRODUCT: 

Comparative  pilot  performance  data  on  blmodal  caution  and  warning  signals  which  differ  as  a func- 
tion of  the  stimulus  duration,  the  modal  priority  and  interstlmului  Interval,  Interactions  of  different 
signals  with  the  amount  of  pilot  workload.  Recommendations  on  signal  requirements  and  design 
specifications. 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  signal,  the  time  to  respond  to 
the  signal,  the  accuracy  of  the  detection  and  response  and  a subjective  evaluation  of  the  aesthetic 
value  of  the  signal. 

TEST  APPROACH: 

The  effort  will  develop  empirical  statistical  data  describing  blmodal  caution  and  warning  signal 
detection  and  interpretation  in  a cockpit  environment.  The  measurements  will  be  taken  in  a simu- 
lated aircraft  cockpit  using  both  visual  and  auditory  warnings.  The  visual  wamlnp  will  be  lighted 
signals  of  moderate  brightness  presented  in  the  pilot's  natural  line  of  vision  while  the  auditory  sig- 
nal will  be  of  moderate  pitch  and  Intensity  with  a signal  to  noise  ratio  of  1 5 dB.  The  order  in  which 
the  signals  will  be  presented  will  be  varied,  visual  first  and  auditory  second  or  vice  versa  with  three 
intervals  between  the  signals  (0,  0.1  and  1 sec).  For  half  of  the  pilots,  the  visual  signal  will  be  the 
primary  warning  and  the  auditory  signal  will  be  an  alert.  This  relationship  will  be  reversed  for  the 
second  half  of  the  pilots.  Each  signal  will  be  present  for  one  of  three  durations  (0.4  and  4 sec  or 
constantly).  To  simulate  the  circumstances  surrounding  the  pilot  in  an  actual  aircraft  environment, 
the  pilot  will  be  assigned  flight  related  tasks  (i.e.,  IFR  fliglu)  to  accomplish  simultaneously  with 
detecting  and  interpreting  the  warning  signals.  These  tasks  will  Impose  one  of  two  workload  levels 
(high  and  low)  on  the  pilots. 


The  data  from  this  study  will  be  used  to  make  recommendations  on  modal  priority,  interstimulus 
interval  and  signal  duration  for  bimodal  caution  and  warning  signals  to  be  used  under  different 
workload  conditions, 
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TITLE: 


CAUTION  AND  WARNING  SYSTEMS  DATA  BASE  AUGMENTATION  ■ 
BIMODAL  SYSTEMS 


VARIABLES:  SIGNAL  CONTENT  x PILOT  WORKLOAD 

PROBLEM:  The  effectiveness  of  any  bimodal  caution  and/or  warning  system  is  dependent  on 

the  detection  and  correct  Interpretation  of  the  signals  by  the  user,  Information  ii 
required  on  the  effect  of  certain  veiiables  on  detection  performance  and  design 
conitralnti  produced  by  these  variables. 


TEST  OBJECTIVES: 


I Augment  the  existing  data  bue  of  Information  on  caution  and  warning  Sipal  detection. 

II  Provide  definitive  data  on  the  effect  of  sipal  content  and  pilot  workload  on  the  detec* 
tlon  of  visual  and  auditory  caution  and  warning  sipals. 

III  Determine  the  impact  of  these  flndlnp  on  system  deslp  and  standardization. 
OUTPUT/PRODIICT: 

Comparative  pilot  performance  data  on  caution  and  warning  sipals  which  differ  as  a function  of 
content;  and  the  interactions  of  different  sipals  with  the  amount  of  pilot  workload.  Recommenda* 
tiohs  on  sipal  requirements  and  deslp  specifioatlona, 

DATA  MEASUREMENTS: 

The  measurements  will  describe  the  time  it  takes  a pilot  to  detect  the  sipal,  the  time  to  respond  to 
the  sipal,  the  accuracy  of  the  detection  and  response  and  a subjective  evaluation  of  the  aesthetic 
value  of  the  sipal. 

TEST  APPROACH: 

This  effort  will  develop  empirical  statistical  data  describing  bimodal  caution  and  warning  sipal 
detection  and  Interpretation  in  a cockpit  environment.  The  measurements  will  be  taken  in  a simu- 
lated aircraft  cockpit  using  both  visual  and  auditory  warnings.  The  warnings  will  have  three  types 
of  content'  (1)  visual  sipal  tones;  (2)  auditory  non-verbal  signal  with  Msual  sipal;  and  (3)  auditory 
verbal  sipal  (sentence)  with  a visual  sipal.  In  order  to  direct  the  pilot  to  the  correct  annunciator 
panel  for  response  two  types  of  cueing  will  be  tested,  (1)  a legend  cue  on  the  visual  sipal  and  (2) 
an  alphanumeric  readout  panel.  To  simulate  the  circumstances  surrounding  the  pilot  in  on  actual 
aircraft  environment,  the  pilot  will  be  assiped  flight  related  tasks  (l.e.,  IFR  flight)  to  perform 
simultaneously  with  detecting  and  interpreting  the  warning  sipals.  These  tasks  will  Impose  one  of 
two  workload  levels  (high  or  low)  on  the  pilot. 

The  data  from  this  study  will  be  used  to  make  recommendations  on  the  sipal  content  for  blmodai 
systems  to  be  used  under  different  workload  conditions. 
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